ietf-mxcomp
[Top] [All Lists]

Re: consensus call on pra/mailfrom deployment and versioning/scope

2004-09-09 13:44:18

On Thu, Sep 09, 2004 at 02:56:33PM +0100,
 David Woodhouse <dwmw2(_at_)infradead(_dot_)org> wrote 
 a message of 16 lines which said:

That's strange. If you publish a SPF record for example.com, surely
mail.example.com (the name you announce in HELO) has a SPF record,
too? 

strcmp("example.com", "mail.example.com");

As Mark said, they don't _share_ a record. They each have their own.

Well apparently, my english was not good enough to make me clear.

1) When you publish a SPF (I said SPF, not SenderID) record for
example.com, if your mail server is mail.example.com, you *also*
publish a SPF record for mail.example.com. Always. Otherwise, there is
a trivial way of spoofing you.

2) Since you already have a SPF record for both names, adding the HELO
check in SenderID changes nothing. You already had the two records.



<Prev in Thread] Current Thread [Next in Thread>