Antonio Querubin

'not authorized' means retrieved SPF records for the sender's domain indicate the mail should be rejected. If SPF record retrieval is failing, that's a different type of error message altogether. If SPF indicates reject but the mail really is legitimate, whose responsibility is it to fix? The receiving mail server's operator has no control over the sender's SPF DNS records. That corrective feedback to the sender's mail server (and possibly DNS) operator is best handled by DMARC reporting. Suppose...

On Sun, 21 May 2023, Bjorn wrote: This does not appear to be a Logwatch issue. Rather, it is signalling a configuration error that needs to be fixed in the email server. My concern about processing it in Logwatch is that it would essentially bury this error. 'not authorized' means retrieved SPF records for the sender's domain indicate the mail should be rejected. If SPF record retrieval is failing, that's a different type of error message altogether. If SPF indicates reject but the mail really is...

postfix script doesn't recognize SPF fail - not authorized