Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an Ubuntu raring server running postfix/dovecot as an email server, with tumgreyspf doing greylisting and SPF checks.

My problem is that I also have a backup MX server, that is supposed to store my emails temporarily, should my main server ever fails. It usually rejects receiving emails if it finds the main server online and functional.

The problem is when it does need to do its job, tumgreyspf rejects all emails from the backup MX with an error like this:

Jun 27 16:18:13 hamra postfix/smtpd[28732]: NOQUEUE: reject: RCPT from[x.x.x.x]: 550 5.7.1 <>: Recipient address rejected: QUEUE_ID="" SPF Reports: 'SPF fail - not authorized'; from=<> to=<> proto=SMTP helo=<>

any ideas?

share|improve this question
up vote 1 down vote accepted

tumgreyspf README


  SPF checks need to be bypassed for relays for the domain, such as
   secondary MX servers.  [...]

   One way of bypassing this check would be to ensure that MX servers are
   listed in mynetworks, and that permit_mynetworks is ahead of the call to
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.