On Mon, 2004-11-15 at 08:38, Dave Crocker wrote:
On Mon, 15 Nov 2004 11:28:58 -0500, Carl Hutzler wrote:
Hoping to compare the helo domain to the IP addresses listed in
the corresponding SPF record for that domain. We would provide
stats like:
1) Number of times an SPF record existed
2) Number of times SPF record did not exist
3) Number of times the helo domain matched the spf record for that
domain and the IP address of the mail client
oh. interesting.
methinks it might also be useful to look at the policy information in
the record, but i do not know what bits would be more interesting than
other bits.
Are they resolving to the SMTP client using a host-name EHLO domain?
This could be difficult to ascertain, if they employ a wild card for the
SPF record. If so, one may expect to see deny-all records. When
testing against an SPF record, excluding a sub-domain from the EHLO
domain may locate a permissive SPF record for those that report the
host-name. It is important to expect the use of a host-name in this
response for use with CSV.
-Doug