spf-discuss
[Top] [All Lists]

Re: [spf-discuss] using HELO instead of MAIL FROM with SPF

2003-09-30 16:57:34

Meng Weng Wong writes:
ouch.  if you don't pass in a meaningful sender, Mail::SPF::Query will
use the helo domain.

BTW this seems to work very well indeed:

  2.815   0.0000   3.0571    0.000   0.92   -0.10  T_SPF_PASS
  0.063   0.4577   0.0295    0.939   0.74    0.10  T_SPF_FAIL

3% of nonspam gets SPF "pass", 0.45% of spam gets "fail" -- which isn't
bad, given how early in the stdization process it's at.

Ignore the 0.0295% -- that was an error in my own SPF setup, cough ;)

So how naughty is it to use HELO data instead of MAIL FROM for the
SPF check? ;)

--j.

On Mon, Sep 29, 2003 at 07:31:32PM -0700, Justin Mason wrote:
| How viable is this -- using the HELO domain instead of the MAIL FROM
| to use in the SPF check?
| 
| I'm running into trouble with getting reliable MAIL FROM data from message
| headers, unless the MTA has been modified to add it specifically (many
| don't do this by default, including sendmail).
| 
| "Return-Path" in particular is proving unreliable quite often. :(
| 
| --j.
| 
| -------
| Sender Permitted From: http://spf.pobox.com/
| Archives at http://archives.listbox.com/spf-discuss/current/
| To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
| please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com






-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf