This 'forwarding' issue is resolved with 'SRS' (Sender Rewriting = Scheme) that complements SPF. In fact SPF allways need SRS :) (except on final smtp servers that you are sure it's not possible to = forward to foreign servers that are not controlled by you) The couple SPF + SRS can be called 'new' SPF, and many products = implementing SPF implement SRS too.
Some info on SRS here : http://www.openspf.org/SRS Francis >-----Message d'origine----- >De : [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] la part de Ivo Smits >Envoy=E9 : vendredi 27 avril 2007 01:17 >=C0 : [email protected] >Objet : [xmail] Re: Dynamic DNS / Don't use SPF > > >Someone pointed out that SPF may cause other problems. A=20 >recent example: > >I ([EMAIL PROTECTED]) tried to email some abuse department,=20 >[EMAIL PROTECTED] >This address was redirected to [EMAIL PROTECTED] >My server delivers my email to MX1.example.com, which=20 >redirects the email. >MX1.isp.com sees a mail from the IP of MX1.example.com, with=20 >the address=20 >[EMAIL PROTECTED], >it then checks the SPF record for UFO-Net.nl and notices that=20 >MX1.example.com is not allowed to send this mail. > >So probably everyone will end up with a SPF record that tells=20 >the other=20 >mailserver to just accept email from everywhere (even GMail uses this=20 >record!). >The only use of SPF may be to skip some resource-expensive checks like = >spamassassin. > >Ivo > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
