Risks of .forward-ing?

SPF is fundamentally broken, as your predicament illustrates. Simply don't use SPF, and then forward your mail.

Well… the SPF thing was a side note, actually. I'm way more afraid about the possibility of forwarding spam, which'll be then seen by Gmail's filters as originating at my Linode. (SPF simply makes that even worse; recommended way of forwarding SPF-protected mail is by performing SRS, in which case a spam message would have even more false clues pointing to the forwarding node being the original source.) For now it was a single spam message that got thru the basic SMTP-time tests, but I'm a bit afraid what could happen if that number would increase.

Oh, hmm…. I'm not sure how Google will handle that.

For what it's worth, I've run the full Spamassassin/ClamAV on my lowest-end Linode, well before it was a 360, without problems. While hosting Web sites, handling a fair amount of email, etc.

FWIW, I've been doing just that, using .forward to forward mail to my GMail account since the beginning of 2005, and so do a number of other users on the mail server. The mail server does filter almost all spam out, but some still manages to get through and gets forwarded to my GMail account.

GMail has never (so far) marked my server as a spam relay, even though GMail does filter the few spam messages that get through. This leads me to believe that GMail doesn't use the originating IP in determining if a message is spam (or it gives it a really low score).

I'd say you're safe using .forward.

–deckert

Use .procmailrc instead. This will rewrite the sender of all of the email to be your server, so SPF should always pass.

:0 fw
* !^X-Loop: example@gmail.com
| /usr/bin/formail -A'X-Loop: example@gmail.com'

:0 A
! example@gmail.com

Note that Gmail will still reject email from eBay/Paypal. For some stupid reason, rather than using SPF, Google decided to do their own thing, which ignores the rewrite.

@BarkerJr:

Note that Gmail will still reject email from eBay/Paypal. For some stupid reason, rather than using SPF, Google decided to do their own thing, which ignores the rewrite.

Are you sure? I forward all of my email to google (using the same procmailrc trick you do), publish SPF for my domain, and get my paypal and ebay emails just fine…

Not totally sure. I converted to Google Apps half a year ago cause I got sick of it all :)