Will enabling ‘do not check SPF IP addresses’ for Spam Filter Servers disable SPF Checking?

Overview

You have an external Spam Filter service provider along with Kerio Control internal SPF checks enabled, and would like to know whether enabling 'do not check SPF IP addresses' for Spam Filter Servers would disable SPF checking for the domains.

Information

Whitelisting the IP address of the Spam Filter Servers from SPF checks is not exactly disabling SPF checks completely.

• For the domains that are configured with MX records that enable them to receive emails directly, SPF check would still be performed by Kerio Connect.
• For the domains that have MX records to receive emails through the Spam Filter Servers, check if those Servers are performing SPF check at their end as part of the spam filtering process,
  • If yes, no need to perform SPF check again in Kerio and IP address of the Spam Filter Servers can be safely whitelisted. Refer: Secure email delivery via Sender Policy Framework for more information
    • Add the IP of the Spam Filter servers into the "do not check SPF IP addresses" group
    • Web admin > Configuration > Spam Filter > SPF > Other Settings > Enable and edit the "Don't check SPF from the IP Address Group" option
  • If not, consider Kerio Anti Spam as a full-fledged solution that can be used to skip Spam Filter Servers from the mail flow
    • For this, configure the domains to receive emails directly, because if the mails are delivered through the servers with the IP addresses seen in the SPF records, and if the SPF check is performed on servers receiving email from these domains, then SPF check will not fail