Visual RFC.
ALL RFCs / RFC 7208
Read the RFC ↗
RFC 7208 / MECHANISM GUIDE

Forwarding and result meaning

05

A forwarding host can change the connecting IP without changing the envelope domain.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

RFC 7208 · § 10.3EXAMPLE
3 / 3
Forwarding and result meaningA forwarding host can change the connecting IP without changing the envelope domain.Forwarding and result meaningSender IP AReceiverForwarder IP BMAIL FROM domain remains example.orgSPF can fail at the forwarded hop
03
Re-evaluate at that hop

The new address may fail the unchanged envelope domain’s policy.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

A legitimate forwarded message can therefore fail the original domain’s SPF check.

  • A legitimate forwarded message can therefore fail the original domain’s SPF check.
  • SPF pass is not proof that the visible author domain aligns or the content is harmless.
  • Receiver disposition remains a policy decision informed by the result.
DETAILS

Examples are illustrative. Consult the linked RFC and its errata for implementation details.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. Which identity SPF checks
  2. Publish and find the record
  3. Mechanisms and qualifiers
  4. DNS work and errors
  5. Forwarding and result meaning
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗