-----Original Message-----
From: owner-ietf-mxcomp(_at_)mail(_dot_)imc(_dot_)org
[mailto:owner-ietf-mxcomp(_at_)mail(_dot_)imc(_dot_)org] On Behalf Of John
Levine
Sent: donderdag 26 mei 2005 19:12
To: ietf-mxcomp(_at_)imc(_dot_)org
Cc: william(_at_)elan(_dot_)net
Subject: Re: SPF PASS (was: "If you believe that the SPF
concept is fundam entally flawed, please subscribe at
http://www.imc.org/ietf-mxcomp/")
The domain names in my EHLOs is completely disjoint from the set in my
MAIL FROM and mail headers. How is SPF going to handle that?
Typically, HELO/EHLO is only used in the special case of MAIL FROM: <>, so
to have the SPF client check against postmaster(_at_)HELO(_dot_) Since there is
no
MAIL FROM identity to protect in case of an empty envelope-from, it would
suffice to just publish this simple SPF record (BIND style) for your
completely disjoint HELO/EHLO name:
completelydisjoint.mydomain.com. TXT "v=spf1 a -all"
That will ensure, that in the case of a DSN, your own mailer is always
authorized (and no one else!). That easy.
- Mark
System Administrator Asarian-host.org
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx