On söndagen den 27 april 2008, David Woodhouse wrote:
> If the record is _just_ "-all" then that's fair enough -- and that can
> be done with a dnsdb lookup. But unless I misread your ACL, you'll alco
> be rejecting mail based on even the idiotic SPF records which list a few
> 'genuine' hosts followed by -all, with the fundamental misunderstanding
> of SMTP that that entails.

That's how it's supposed to work (provided that those hosts are in fact the 
*only* genuine hosts), so I fail to see what's so idiotic about it. Before 
rejecting mail that fails the check you of course have to allow for the case 
that the recipient has set up a forwarding from elsewhere to your server. 
Failure to do that indicates a fundamental misunderstanding of SMTP on the 
receiver's part, not on the part of the publisher of the SPF record.

-- 
Magnus Holmgren        [EMAIL PROTECTED]
                       (No Cc of list mail needed, thanks)

  "Exim is better at being younger, whereas sendmail is better for 
   Scrabble (50 point bonus for clearing your rack)" -- Dave Evans

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to