I am glad Scott brought some sanity to this thread.  SPF is a good
thing.  It isn't without its problems but it does A LOT of good.

I see no reason not to publish SPF, you can publish with ~all until
you get everything worked out and then do -all.  I don't recall
softfails being real clear on their page, which is why I am posting
it.

Another good thing here is that it should get a lot more people
sending mail from where they are supposed to be sending mail (i.e.
using SMTP AUTH etc etc).  AOL spam is all but dead since they publish
SPF (if your mail server is using SPF that is).

One thing to watch out for is forwards/aliases.

example:

you have email going to [EMAIL PROTECTED] forwarded to [EMAIL PROTECTED]
(2 different mail servers).

If [EMAIL PROTECTED] sends an email to [EMAIL PROTECTED], doe.com publishes SPF,
and example.com uses SPF, then the mail will fail.  example.com will
say that blow.com is not authorized to send email for doe.com

How is that for a tongue twister? :)


On Mon, 09 Aug 2004 10:38:33 -0400, you wrote:

>[Again, replying to 2 posts to keep the volume on the list down]
>
>>FYI -- Not all DNS providers are allowing users to modify the TXT record 
>>in their zones necessary to implement SPF.
>
>People using DNS hosts that do not should [1] ask if they can be added 
>manually; if not, they should [2] switch to a modern DNS hosting company.
>
> > Based on my own log files, fully 75% of spam comes from "unknown" ...
>
>I assume you mean an SPF result of "unknown"?  That's great -- that means 
>that 25% of your spam comes from domains with SPF records, which means that 
>25% of your spam can be blocked relatively easily (either it will be 
>blocked automatically, or if the spammer owns the domain and has an SPF 
>record, the entire domain can be blacklisted with an RHSBL test).
>
>                                                    -Scott
>---
>Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
>since 2000.
>Declude Virus: Ultra reliable virus detection and the leader in mailserver 
>vulnerability detection.
>Find out what you've been missing: Ask for a free 30-day evaluation.
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>
>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to