[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of Nico
Sent: Sunday, February 13, 2005 10:25 AM
Subject: Re: [spf-discuss] Handling of -all
There's a booby trap here. "Should be delivered" is not the same thing as
"not rejected by SPF". SPF is not an *approval* method, it's a *rejection*
method. Any other filtering the recipients are doing can certainly
still be done.
Yes, SPF actually supports more reliable filtering for both filtering in and
filtering out. As an example, spammers will often set mail-from/from =
receipt to address. As a result, without SPF, you can't whitelist yourself
in a spam filtering program like SpamAssassin. Post SPF (since you've
already rejected the forgeries if your record ends in -all), you can safely
whitlist your own address since the forgeries don't make it that far.
I did not mean to suggest that an SPF pass should bypass normal filtering.