Further than trimming, they should consider using neutral qualifiers for generic mail sites. "include:spf.protection.outlook.com" can allow office users to fully impersonate the save.ca domain. Setting "?include:spf.protection.outlook.com" provides for not rejecting due to -all, while not granting "pass".

Best
Ale

On 12/03/2024 03:01, Suresh Ramasubramanian wrote:
This looks more like they’ve been testing several providers and ended up with a large spf record that they might want to consider trimming.

--srs
------------------------------------------------------------------------
*From:* mailop <[email protected]> on behalf of Michael Peddemors via mailop <[email protected]>
*Sent:* Tuesday, March 12, 2024 4:24:03 AM
*To:* [email protected] <[email protected]>
*Subject:* [mailop] Love how people use SPF records.. Just for a chuckle..
host -t TXT save.ca

save.ca descriptive text "v=spf1 ip4:70.33.236.0/25  mx a
include:sendgrid.net include:thestar.ca include:thestar.com
include:spf.google.com include:spf.protection.outlook.com
include:spf.yahoo.com include:spf.aol.com include:amazonses.com -all"

... so.. basically hard block everything except 1/2 the internet..

I assume someone that likes spamming set THAT one up.. there is a good
reason that SPF have a maximum DNS amount of queries..

#   69.39.224.72                   2   serviciodeestudios.bbva.com
#   69.39.224.73                   2
materialsresearchinstitute.northwestern.edu
#   69.39.224.75                   3   serviciodeestudios.bbva.com
#   69.39.224.77                   2   email.save.ca
#   69.39.224.78                   2   libetwitt.liberation.fr
#   69.39.224.79                   1   producteursdici.intermarche.com
69.39.224.72/29

No need to comment more of course..



--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com <http://www.linuxmagic.com> @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca <http://www.wizard.ca>
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop <https://list.mailop.org/listinfo/mailop>

_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to