Mark Sapiro writes: > On 08/23/2015 08:13 AM, Stephen J. Turnbull wrote: > > > > Executive summary: if you're sure you've got all your hosts covered by > > the SPF record, use -all as Jim P says. > > There is an issue with -all. SPF does not work with .forwards or other > relaying of that nature. If you can be certain that every recipient's > final MX is the one your server sends to, then -all is OK, but you > can't.
True enough. Note: If I took that argument seriously, I'd use ?all, not ~all, though. According to RFC 4408, you shouldn't reject a message only because of an SPF softfail, but it's not neutral, either. Mail will be lost if you use ~all, just not as much. > The scenario is your list member is [email protected]. > [email protected] is set to forward all mail to [email protected]. Heh. This user is screwed if you use dmarc_moderation_action too. Bottom line: Friends don't let friends use Yahoo! or AOL. ------------------------------------------------------ Mailman-Users mailing list [email protected] https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
