• Inviting everyone who uses WordPress management tools in Plesk
    The Plesk team is conducting a 60-minute research session that includes an interview and a moderated usability test.
    To participate, please use this link .
    Your experience will help shape product decisions and ensure the tools better support real-world use cases.

Tweak to make SPF test look at "From" header?

HostaHost

Silver Pleskian
I'm curious if there are any changes that can be made to the SPF filter, or spam assassin, to have the "From" header of the message investigated for SPF pass/fail in addition to the Return-Path? We have customers with explicit (-all) spf records still seeing forged emails coming in claiming to be from their domain because the sender used their own return-path but forged the From header.
 
Actually SPF takes all parameters from SMTP session. SPF test works before the From or Reply-TO received. It takes MAIL FROM: from SMTP session, makes DNS query to the domain, and checks IP address came from mail.
Can you show some kind of samples?
 
Back
Top