Alias is redirecting instead of forwarding [message #152317] |
Thu, 28 July 2022 10:38  |
phil68
Messages: 20 Registered: January 2013
|
|
|
|
I have the following problem:
If I send an email from "xxx@xyz.com" (Kerio Connect but probably doesn't matter what product) to an adress in domain abc.com (on a Kerio Connect 9.4.1) that is an alias, supposed to forward to an external adress "abc<_at_>def.com" the message is being rejected from the target server:
554 5.7.1 <abc@def.com>: Recipient address rejected: Rejected by SPF: <IP of MX of abc.com> is not a designated mailserver for xxx<_at_>xyz.com
For sure there is no SPF for xyz.com <_at_> the <IP of MX of abc.com>. So it seems that Kerio is redirecting the mail keeping the original sender which results in this rejection. If I check the logs of "abc.com" I can see a lot of rejections because of this.
Any idea how to fix this or is it a bug?
|
|
|
Re: Alias is redirecting instead of forwarding [message #152321 is a reply to message #152317] |
Thu, 28 July 2022 18:07   |
EduardoPeters
Messages: 13 Registered: September 2020
|
|
|
|
Are you using a server-side rule to forward this (Either in the Incoming section of Message Filters or in the user's Forwarding tab inside the Webadmin UI)?
If so, a quick solution would likely be to just set up the forwarding from within the user's own mailbox (as a Sieve filter rule).
If that doesn't work, you could probably remove the existing forwarding and create an Incoming rule that rewrites the headers of the incoming email to a domain that would work.
|
|
|
Re: Alias is redirecting instead of forwarding [message #152330 is a reply to message #152321] |
Sat, 30 July 2022 10:08   |
phil68
Messages: 20 Registered: January 2013
|
|
|
|
Thanks for your answering - it is a standard alias address as it can be defined in the interface. I've quite a lot of these on different servers mainly for status messages being forwarded to me - this works fine as long as the original message ist sent from the same domain as the alias is in.
From my understanding a forwarded email should be seen by the receiving server as sent from the domain that was originally addressed in the first email, so it will pass the SPF check. Otherwise aliases to external addresses won't work reliably for mails sent from external domains.
There is no mailbox existing because that would require a license.... I'm concerned that this behaviour will lead to more such problems since mail servers nowadays do heavily check SPF records so this will happen a lot.
I'll see if I can do something about it by creating rules etc.
|
|
|
|
Re: Alias is redirecting instead of forwarding [message #152365 is a reply to message #152317] |
Wed, 03 August 2022 14:47  |
freakinvibe
Messages: 588 Registered: April 2004
|
|
|
|
I think this is working as designed. The primary use for Aliases is to bounce emails to a generic address like "webmaster@mydomain.tld" to your personal "my.name<_at_>mydomain.tld", so you do not have to check the webmaster mailbox all the time.
I don't think it really works to use aliases to bounce emails to a domain you do not own, because (as you say correctly), SPF will not allow that.
If you want to have a mail auto-forwarded, you will have to create an account (which costs a license) and then configure it to forward the mail.
Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
|
|
|