On Mon, 4 Sep 2006, John Andersen wrote: > > MTA SPF should only be run on a mail relay that is receiving messages > > directly from the Internet. > > Most of my mail comes direct to pen.homeip.net > Maybe 2% I pop via Fetchmail
ok. > > > Received: from utl-lnx3.puk.ac.za by <aweb-site-of-mine>.com with > > > > You MAY be able to get SPF within SA on pen.homeip.net to work by > > extending your trusted hosts list out to include postini, or to > > <aweb-site-of-mine>.com > > Would I not have to trust every thing along the path? My ISP, > postini, and the hosting company <aweb-site-of-mine>.com ? And > would this trust also have to mention one of the 6 or 7 mail > servers my ISP uses and all of them at postini? Maybe, I am not sure; I've never had to do any complex tweaking of trust path. > > Alternatively, you may want to perform MTA SPF checks at > > <aweb-site-of-mine>.com (assuming, of course, that you have the > > necessary level of administrative access), as it is directly exposed > > to inbound email from the Internet at large. You may also want to run > > SA *there* (same assumption), unless pen.homeip.net aggregates several > > mail feeds. > > No, that's just a hosting company, I have no control of them. You might lobby them to at least make SPF checks an option and let their customers decide whether or not they wish to do the checks. 'course, given the direct mail to pen.homeip.net that still wouldn't fix your problem. -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- So Microsoft's invented the ASCII equivalent to ugly ink spots that appear on your letter when your pen is malfunctioning. -- Greg Andrews, about Microsoft's way to encode apostrophes ----------------------------------------------------------------------- 13 days until The 219th anniversary of the signing of the U.S. Constitution
