Sophos Firewall: What action MTA will perform on specific SPF results?

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.


Table of Contents

Overview

This article describes the action MTA will perform on specific SPF results.

What to do

SPF Result Explanation Action by MTA
Pass The client is authorized to inject mail with the given identity. Accept
Fail The client is not authorized to use the domain in the given identity. Reject
SoftFail The host is probably not authorized Accept
Neutral ADMD has explicitly stated that it is not asserting whether the IP address is authorized Accept
None No syntactically valid DNS domain name was extracted from the SMTP session that could be used as the one to be authorized or no SPF records were retrieved from the DNS Reject
Permerror The domain's published records could not be correctly interpreted. This signals an error condition that definitely requires DNS operator intervention to be resolved. Accept
Temperor The SPF verifier encountered a transient (generally DNS) error while performing the check Accept

Regards,




Horizontal Line, Table of Contents
[edited by: emmosophos at 8:05 PM (GMT -8) on 16 Nov 2023]