SpamAssassin not blocking emails with invalid SPF?

[Vipin Haridas]

Hi,

Sorry for re-opening this old thread. But need some clarifications here. It seems, just enabling spamassassin is not blocking the emails with invalid SPF - even if we setup Hardfail.

To make this work, I had to setup "Apache SpamAssassin™ reject spam score threshold" on WHM Tweak settings and set a "SPF_FAIL" score on the "spam filters" option on cPanel.

Is this how we need to set this up? Is there any way to reject emails with invalid SPF records globally (Server wide rather than setting the "SPF_FAIL" score on cPanel spam filter)?.

 

[cPanelLauren]

Hello @Vipin Haridas


Would it be possible to provide the headers including spam scoring of a message that was allowed through SpamAssassin with an invalid SPF? The SPF check is part of the SpamAssassin configuration:

# grep SPF /etc/mail/spamassassin/init.pre
# SPF - perform SPF verification.
loadplugin Mail::SpamAssassin::Plugin::SPF

So it does indeed verify.

Thanks!