https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5684

--- Comment #12 from Karsten Bräckelmann <[email protected]> 2010-07-05 
16:04:22 EDT ---
(In reply to comment #11)
> Actual example of abuse in the wild:

Not abuse. Mis-configuration.

> As long as this is the case SPF cannot be used to filter Nationwide Bank
> phishing, and a whitelist_auth/whitelist_spf against nationwide.co.uk doesn't
> do what you want.

Nationwide and/or Messagelabs need to fix it. Not us.

> It would probably be a good idea to generate a lint warning on whitelist_auth
> or whitelist_spf where +all is present.

That's not what lint'ing is for...

Anyway, glimpsing over the old comments, I too agree that adding the SPF info
as a Template Tag (and thus possibly header) would fix this issue quite nicely.
Which doesn't make it any less of a mis-configuration on their side...

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to