Good morning and sorry for all the posts >.< I've recently seen a problem with a few of our customers, who have decided to forward mails to their gmail accounts. Some mails are rejected do to SPF failure. From an earlier post on the forum, Jessie suggested https://github.com/emsearcy/srs-milter as a possible solution, to not append our server info to the mail header, so Google wouldn't mess it up. Any of you got any experience with it? (A simular problem is described here: https://www.endpointdev.com/blog/2022/03/spf-problems-gmail-workaround/ )
I've used postsrsd in the past which worked fine for me. Here is a quick guide: https://datacadamia.com/marketing/email/postfix/srs The project itself can be found here: https://github.com/roehling/postsrsd Jesse mentioned in another thread that this might be incompatible with ispconfig see here: https://forum.howtoforge.com/threads/ispconfig-postsrsd-sending-domain.83785/ Wouldn't it be much easier to just include the IP of your mailserver into the SPF Record of the customer?
postsrsd definitely works. it does, however, change addresses so everything gets rewritten as your main domain. really annoying... and a pain to troubleshoot via the logs / email headers. would be perfectly fine if it rewrote the addresses to be that of the forwarding domain. will need to look at srs-milter at some point (if i ever get the time) see if it's a better option...
Mhm it doesn't look like there is a good solution for this. For now, our customer decided just to connect from gmail to our server using POP3 instead, but I would like to find a more permanent solution.