Hi !!

> That's probably better to actually _do_ callout when spf=pass, because
> you are "sure" that one the authorized IPs for the domain has sent the
> mail, so you have rights to verify the address exists.

yes, but then the tested address is likely to exist so the callout will
almost always succeed. If you do the callout when spf != pass you will
honour batv (if used by the remote domain) and/or check that at least
the remote address exists.

-- 
Best regards ...

----------------------------------------------------------------
    David Saez Padros                http://www.ols.es
    On-Line Services 2000 S.L.       e-mail  [EMAIL PROTECTED]
    Pintor Vayreda 1                 telf    +34 902 50 29 75
    08184 Palau-Solita i Plegamans   movil   +34 670 35 27 53
----------------------------------------------------------------



-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to