When there is no spf or dkim record, no validation occurs, mails are just let through as normal I doubt there are many isps who would reject mails that simply do not have the records as this would reject a lot of legit mail as it has not become common practice yet, if it was then spoofed spam would be a thing of the past. Although to be clear mail servers do support the above setting, and a corporate environment where you are only receiving mail from your own domains might use that.
Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 10, 2013 5:59 PM, "Dave Watts" <[email protected]> wrote: > > > Most ISP's who employ decent spam filtering will reject mails that fail > an > > SPF or DKIM check.. > > This is where a domain has an SPF record but the mail comes form a server > > not listed in the SPF record, or has a DKIM record but there was no > domain > > key. > > Well, ok, but honestly how many messages fail a DKIM check? You only > use DKIM if you have it set up, and I've never seen a host that will > reject unsigned messages. And for SPF, do you treat soft fails the > same as hard fails? The vast majority of SPF records specify soft > fails rather than hard fails, indicating a lack of certainty from the > sender's domain about how to treat SPF failures. > > > We do this as well, and it rarely causes us any problems and we deal with > > hundreds of domains and millions of emails a day. > > If a customer reports not receiving email from a specific email address, > we > > check the logs, if it is an SPF rejection we simply tell them the reason > > and they will go back to the sender and tell them to sort out their SPF > > record, which is in fact doing the sender a favour as they will have been > > getting rejected by many other ISP's as well until someone tells them. > > I suspect that the position of an ISP may be different from the > position of a company that manages its own mail. I've worked with many > Google Apps customers, going up to forty thousand seats for a single > customer, and it's been very rare that they've been happy using SPF as > a strict filter. Many use it as a tagging mechanism for soft fails, > though. > > As for "doing the sender a favor", I agree with you in a technical > sense but I haven't found it to be a practical response to an end-user > within a large company. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > http://training.figleaf.com/ > > Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on > GSA Schedule, and provides the highest caliber vendor-authorized > instruction at our training centers, online, or onsite. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355343 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
