There are many changes in how Kerio Connect handles SPF with SoftFail results.
By definition, Softfail (~) means that the message does not meet a domain's strict definition of legitimacy, but the domain cannot confidently state that the message is a forgery. MTAs SHOULD accept the message but MAY subject it to a higher transaction cost, deeper scrutiny, or an unfavorable score.
9.2.6 Patch 2 and earlier release
SoftFail is treated as Pass
9.2.7 and 9.2.7 Patch 1-3
The logic to handle Softfail with these versions is as follows:
- If the Action for HardFail is configured as Log only or Add spam score - do the same to SoftFail
- Otherwise, apply the Spam rating Tag score
9.2.8 and 9.2.8 Patch 1
Kerio Connect will apply the Spam rating Tag score to emails with SPF SoftFail results.
Here is an example of a header. On this case, the Tag score set in Configuration>Spam Filter>Spam Rating tab is 5 and it's applied to the email with Soft Failure SPF results.
X-Spam-Status: Yes, hits=5.0 required=5.0
tests=SPF: 5.00 - Soft Failure, TOTAL_SCORE: 5.000
9.2.9 and above
Kerio Connect will no longer apply the Tag score but will only add +1 to the total Spam score. See below sample headers.
X-Spam-Status: No, hits=1.3 required=5.0
tests=SPF: 1.00 - Soft Failure, HTML_MESSAGE: 0.001, XPRIO: 0.299,