In my personal systems (admittedly not on production systems I manage
yet so not quite the same scale) I treat +all and -all as exactly
equivalent (and yes Meng I know I am breaking the standard) meaning that
anything that didn't get a pass by the time I get to that record turns
into a fail.
Since these are only elements in a scoring system so far it works pretty
well.
> -----Original Message-----
> From: Guy Hulbert [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, June 06, 2007 5:24 AM
> To: Meng Weng Wong
> Cc: m.allannoah; qpsmtpd@perl.org
> Subject: Re: blocking smtp connections based on age of domain?
>
> On Tue, 2007-06-05 at 17:43 -0700, Meng Weng Wong wrote:
> > That said, don't use +all as an absolute indicator. There may be
> > good domains that do a +all too.
>
> This seems to make SPF a complete waste of time. Just block those
> domains and force the lazy admins to fix their records.
>
> --
> --gh
>