Postfix失败的SPF检查

我使用的是后缀从我自己的域和postfix-policyd-spf-perl发送邮件来检查SPF。

只有当我从我自己的域发送电子邮件到我自己的域时，SPF检查才会失败。

综上所述：

mydomain – > gmail.com（SPF的作品，gmail可以检查我的SPF）
gmail.com – > mydomain（SPF的作品，我可以检查gmail.com的SPF）
mydomain – > mydomain（SPF失败）

在日志search后，我发现，当我发送电子邮件到我自己的域时，ipaddr发件人是客户端而不是服务器。如果我的邮件客户端不在公司networking中，则ipaddr不在保留的IP地址范围内。

我认为这就是SPF失败的原因。

TLS使用让我们encryption证书。 LDAP用于存储用户凭据。鸽舍被用作LDA。 OpenDKIM，OpenDMARC和SpamAssassin被用作更年期者。

他们都工作（除了因为SPF OpenDMARC）。

什么conf文件，我需要改变，使这个作品？

main.cf

compatibility_level = 2 queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/lib/postfix data_directory = /var/lib/postfix mail_owner = postfix myorigin = $mydomain mydestination = $myhostname, localhost.$mydomain, localhost local_transport = error:Local Transport Disabled local_recipient_maps = alias_maps = inet_protocols = ipv4 smtputf8_enable = no smtpd_milters = inet:dkim:8891, inet:dmarc:8891 non_smtpd_milters = inet:dkim:8891, inet:dmarc:8891 ### DELIVERY virtual_mailbox_domains = $mydomain virtual_mailbox_maps = ldap:$config_directory/conf/ldap_users virtual_transport = lmtp:spam:10025 ### SMTP SERVER ## Authentication smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = inet:lda:24 ## Restrictions smtpd_client_restrictions = permit_sasl_authenticated, reject_unknown_client_hostname smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname, check_helo_access hash:$config_directory/conf/helo_access, permit smtpd_sender_login_maps = ldap:$config_directory/conf/ldap_users smtpd_sender_restrictions = reject_sender_login_mismatch, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_recipient_restrictions = permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination, check_policy_service unix:private/policy, # SPF check check_policy_service inet:lda:7026, # Quota check permit smtpd_reject_unlisted_sender = yes ## Security smtpd_client_new_tls_session_rate_limit = 10 smtpd_tls_CAfile = /etc/ssl/private/letsencrypt/mydomain/fullchain.pem smtpd_tls_cert_file = /etc/ssl/private/letsencrypt/mydomain/cert.pem smtpd_tls_dh1024_param_file = /etc/ssl/private/dh.pem smtpd_tls_key_file = /etc/ssl/private/letsencrypt/mydomain/privkey.pem smtpd_tls_security_level = encrypt smtpd_tls_session_cache_database = btree:$data_directory/smtpd_session_cache

master.cf

 smtp inet n - n - - smtpd -o smtpd_sasl_auth_enable=no submission inet n - n - - smtpd pickup unix n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr unix n - n 300 1 qmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - n - - smtp relay unix - - n - - smtp showq unix n - n - - showq error unix - - n - - error retry unix - - n - - error discard unix - - n - - discard local unix - nn - - local virtual unix - nn - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache policy unix - nn - 0 spawn user=nobody argv=/usr/bin/postfix-policyd-spf-perl

谢谢