Neil,
Thanks for sharing with ExactTarget. Are you saying that checking the box on our commercial spam filtering system’s “check SPF” feature, which quarantines messages that have SPF failures (-all), was a poor decision on my part? I don’t understand what DMARC has to do with this – a sender who implements an SPF record should not the assume the receiver has also implemented DMARC checking. Let me remind everyone again – a message was sent to us from an IP address that was outside the range of the SPF record for that sending email address’s domain, and the SPF record told us to discard the message. I really don’t understand why I’m being blamed for not delivering the message. If the sender wanted a different behavior they should have used a “~all”. I feel I already went above and beyond the call of duty by contacting dozens and dozens of senders who had incomplete SPF records. It just turns out that I didn’t have a contact at Travelocity. Regards, Frank From: Neil Schwartzman [mailto:[email protected]] Sent: Saturday, May 20, 2017 10:58 AM To: [email protected] Cc: Brandon Long <[email protected]>; mailop <[email protected]>; John Levine <[email protected]> Subject: Re: [mailop] Many SPF failures lately Yeah. I did let exact target know. I work supporting a userbase probably a few hundred million the size of yours, and I can tell you, in my world. knowingly, blithely dropping legitimate email is likely a firing offense. I suggest you may wish to avail yourself of deep knowledge of DMARC technologies so you can actual insight into what senders intend you to do in light of their declarations. -- Neil Schwartzman [email protected] <mailto:[email protected]> Tel.: +1 (514) 629-6345 On May 20, 2017, at 11:31, <[email protected] <mailto:[email protected]> > <[email protected] <mailto:[email protected]> > wrote: I guess it depends on how our customers forward to the email account provided by us. I’m sure that there are some messages that we do block due to forwarding, but when I manually examined four weeks of SPF-based blocks, I don’t recall seeing one example. You’re very much right that waiting for feedback from end-users is very much incomplete. We do not do policy enforcement purely based on SPF unless it is a ”-all”. For all others it’s part of the spam analysis mix. If someone does know the mail operator/group for Travelocity, perhaps they can be alerted to the issue I raised. Frank From: Brandon Long [mailto:[email protected]] Sent: Saturday, May 20, 2017 1:56 AM To: Frank Bulk <[email protected] <mailto:[email protected]> > Cc: John Levine <[email protected] <mailto:[email protected]> >; mailop <[email protected] <mailto:[email protected]> > Subject: Re: [mailop] Many SPF failures lately Is forwarding mail something your users never do? Or do you think the sender should be able to specify that the mail can't be forwarded? With the exception of a pure -all record, policy enforcement based purely on spf is a poor choice. Maybe, depending on your users, it won't raise the fp rate that much. OTOH, if you just reject without letting in a fraction, how do you even know what your fp rate is? Waiting for feedback from your users that they're missing messages they may not even know they should have gotten is a poor way to measure effectiveness. Brandon On May 19, 2017 9:34 PM, <[email protected] <mailto:[email protected]> > wrote: John, I'm a bit bewildered -- these aren't random strangers, they're the actual sender. Am I supposed to second-guess the sender's instructions? If I have to second-guess every sender's "-all" then I have to have another layer of subjective analysis -- currently manual, in my situation. Frank -----Original Message----- From: John R Levine [mailto:[email protected] <mailto:[email protected]> ] Sent: Friday, May 19, 2017 7:22 PM To: [email protected] <mailto:[email protected]> Cc: [email protected] <mailto:[email protected]> Subject: RE: [mailop] Many SPF failures lately > Yet the senders, via their SPF records with a "-all", told me to reject those messages. As MTA's, we're doing what the send told us to do. I don't know about you, but I do not blindly follow instructions from random strangers. It rarely leads to good outcomes. > For my users, I have the quaint idea that I should try and deliver the > mail that they obviously want. Regards, John Levine, [email protected] <mailto:[email protected]> , Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. https://jl.ly _______________________________________________ mailop mailing list [email protected] <mailto:[email protected]> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop _______________________________________________ mailop mailing list [email protected] <mailto:[email protected]> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
