One of our clients is getting mail rejected from one of his customers. The sender's SPF record is:
v=spf1 +a +mx +ip4:18.104.22.168 ?all
The mail is not originating from 22.214.171.124, but AFAIU the '?all' means my mail server (postfix) should accept it. Is that correct?
Can I change my '/etc/postfix-policyd-spf-python/policyd-spf.conf' to make it accept these emails, and if so how?
Should I do this?
FWIW the message in py error log is:
Message rejected due to: access neither permitted nor denied.
Thanks in advance.
My SPF policy was:
HELO_reject = SPF_Not_Pass Mail_From_reject = Fail
The mail was being rejected at the HELO stage, which I've changed now to 'Fail'.