>Your SPF records do not reduce the spam you receive. Instead, they reduce
>the spam others may receive.

Not true.  SPF can reduce the spam you receive.  If a spammer forges one of
your domains when sending to you, then you can determine that the email was
forged via your own SPF records and take appropriate action.

I agree that you have to set it up properly.  I have a growing list (the SPF
dummies list) of significant domains that have SPF set up but allow their
users to bypass, and therefore fail, SPF.  The easiest thing to do is just
to have all users in a domain send through your mail servers, however you
can add additional addresses to the SPF record for other mail servers to
cover other scenarios.

Darin.


----- Original Message ----- 
From: <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, December 21, 2005 1:51 AM
Subject: RE: [IMail Forum] An update on SPF


Marc,

Your SPF records do not reduce the spam you receive. Instead, they reduce
the spam others may receive.

I use SPF to tag potential spam with good results using an XWall mailrelay
in front of my IMail server. Within XWall, you define a "default" SPF value
to use if the sender domain has none defined. I use "v=spf1 ?all" as default
which does not block anything.

If a sender domain has an "exclusive" SPF record .defined (using -all), then
you should honor it by either refusing the mails or definitely tag them as
spam. There are "soft" SPF definitions (~all) for "recommended" sender IPs.
These can be used in a weighting system only.

The best tool can be used the wrong way, reversing the intended purpose.
Unfortunately, several well-meaning but nevertheless incompetent mailadmins
define "exclusive" SPF records for their domains while missing the big
picture of traveling users, POP mailaccounts or home offices.

Marius

-----Original Message-----

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Funaro

Sent: Tuesday, December 20, 2005 2:22 PM

To: [email protected]

Subject: [IMail Forum] An update on SPF



Hi Everyone,

I've been out of the loop for a while, but would now like to ask the imail
community -- is the SPF-worth-it debate settled down? Is it worth the time
now to set up SPF records, and is it reducing spam? We have about 100
domains, and setting up SPF for all of them will be time consuming, but if
it is now implemented and used by enough ISPs/etc., we have the time and
resources to do it at this point. Just looking for opinions... But let's not
turn this into a flamefest or anything :)

Thanks for your time,

Marc




To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to