Charles, You're at least partially correct in making that statement. In our case though, most legitimate email to our server has an SPF record. We do get emails from Yahoo users and Yahoo does not use SPF, they exclude it entirely in favor of their own DKIM... NIH in action, IMHO. Don't misunderstand me, there's nothing wrong with DKIM... it's a great mechanism but they really should publish an SPF record as well (again, IMHO).
Still - simply penalizing "SPF: none" results is a workaround. If the domain portion of the "MAIL FROM" (and possibly the "HELO" according to RFC4408) identities do not match the reverse-lookup (PTR), then the message should be considered suspect if there is no SPF record to validate the mismatch. As far as I know, ASSP does not check this case yet. Regards, - Phil ----- Re: [Assp-user] SPF None (spfnonValencePB) setting is ignored <http://sourceforge.net/mailarchive/message.php?msg_id=27403449> From: Charles Marcus <CMarcus@Me...> - 2011-04-24 02:20 On 4/22/2011 2:59 PM, Phil Quesinberry wrote: > Since most legitimate domains have an SPF record, This is a really bad and WRONG false presumption. -- Best regards, Charles ------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
