On Tue, 2004-11-09 at 18:30 +0100, Philipp Morger wrote: > On Tue, Nov 09, 2004 at 16:28:00 +0100, Jeroen Massar wrote: > > On Tue, 2004-11-09 at 16:15 +0100, Philipp Morger wrote: > > > well, you sound like a candidate for propagating SPF in your DNS :) > > > > http://spf.pobox.com/mechanisms.html#ip6 > > 8<--------------- > > ip6 > > Could someone with IPv6 experience please provide some input? > > --------------->8 > well, check http://www.ozonehouse.com/mark/spf/draft-lentczner-spf-00.txt
<SNIP ipv4 parts> > IP6 = "ip6" ":" ip6-network [ ip6-cidr-length ] > ip6-cidr-length = "/" 1*DIGIT > ip6-network = as per [RFC 3513], section 2.2, > e.g. 2001:DB8::CD30 Let's see, thus you have ip6:2001:db8::/32 in your SPF record? I don't think that is a nice parsable format. Should at least be something like: ip6:[2001:db8::/32] then, otherwise it is quite ambiguous, eg: "ip6:::ffff:192.0.2.0/24" would not really work IMHO. Also, unfortunately MARID has been stopped, but things can also be arranged outside of the IETF. <SNIP> > ok, ok - I admit it, the Query.pm module had to be modified, but it works! > Don't try the link, the website only understands IPv4. The patch-file to the > pm > is submited to Meng, but somehow are not yet implemented. > > If you check the spf record you'll see that I only allowed the mx's, but > according the > "snipplet" above you can also define bare IP's. But how, that is the question ? :) I would like to allow 2001:7b8:300::/48 for instance, I cannot stuff that into DNS using MX records. Next to that, as you mention, there doesn't seem to be much movement and support for IPv6 and how many hosts will actually support IPv6 SPF records and/or check them at all, thus does it make sense? -> not yet... When they have solved it, I will add these SPF records of course as I think it is a good way of at least halting down some spam... Then again most UE I receive is virusses and then anti-virus reports from misconfigured anti-virus tools and after that a little bit of spam. All of which gets taken care of by SA and Clam ;) Greets, Jeroen
signature.asc
Description: This is a digitally signed message part
