Hi,
On Tue, Oct 27, 2020 at 01:00:59PM +0100, Jeroen Massar wrote:
Making sure one only egress mail that one is supposed to send (SPF/DKIM/DMARC/ARC) is the only way to do that and would mean being a good citizen on the Internet,
Much easier said than done...
which is why lists like UCEProtect exist: if you configure your stuff correctly, you won't end up on them.
You totally miss the "you have a contract with the customer to run their mail for them, so of course you accept the mail, and then they mess up their SPF records in DNS" part.
And then your whole mail server is blocked.
Gert Doering -- NetMaster