On Mon, 2004-03-08 at 11:37, Ilan Aisic wrote:
> I was more worried about whether I should implement support for it in
> my DNS and if so, how to handle all the cases when people with legit
> email at my domain (pointer.co.il) hook up with their ISP from home
> (like I do right now) and identify themselves with their work email. 

Setting up authenticated SMTP or POP-before-relay would be the best
solution.  That way, you can just publish a single server in your SPF
record.  

> In addition, when I sometimes travel, I use temporary mail servers to
> send mail but still use the POP server at pointer.co.il and  identify
> myself as [EMAIL PROTECTED]   Without reading all the material about
> SPF, it seemed to me that if I can't declare "-all" in the text record
> of the DNS, I defeat the purpose of SPF.

If you must use many other servers, then don't declare "-all".  You're
not defeating the purpose of SPF... your messages will be treated with
more suspicion if sent through an unlisted host than if they were sent
through a listed host.  This will make it a little tougher for spammers
who want to abuse your domain.  (Although it'd be tougher still, if not
impossible, if you published "-all")

- Jon

-- 
[EMAIL PROTECTED]

Administrator, tgpsolutions
http://www.tgpsolutions.com

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to