ietf-asrg
[Top] [All Lists]

Re: [Asrg] Re: SPF abused by spammers

2004-09-21 16:49:40
On Fri, Sep 17, 2004 at 03:11:18PM +0000, Mark wrote:
Hello? Ever heard of HELO? :) Sending with en empty envelope-from, to try 
and circumvent SPF, is pointless: checks are done against HELO, in that 
case (as if tested against, say, postmaster(_at_)HELO). Consequently, since 
there is nothing to prevent, there is nothing to send "non empty" either 
(where empty was the case).

That was the reference I didn't find.
Which leads to the problem with
   HELO [10.0.0.1]
or
   HELO i222-150-67-241.s04.a013.ap.plala.or.jp

which would require all ISPs to add SPF records to all entities and
raises again the problems Barry Shein has addressed.

And: if I am a customer of some.isp and my current revDNS entry for the
IP I am using is
    1.0.0.10.rev.dsl.some.isp
should I be allowed to send a bounce on behalf of that address, i.e. use
the name or IP in the HELO string?

        \Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
"The security, stability and reliability of a computer system is reciprocally
 proportional to the amount of vacuity between the ears of the admin"

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg