spf-discuss
[Top] [All Lists]

Re: using HELO instead of MAIL FROM with SPF

2003-09-30 17:04:09
On Tue, Sep 30, 2003 at 04:57:34PM -0700, Justin Mason wrote:
| 
| Meng Weng Wong writes:
| >ouch.  if you don't pass in a meaningful sender, Mail::SPF::Query will
| >use the helo domain.
| 
| BTW this seems to work very well indeed:
| 
|   2.815   0.0000   3.0571    0.000   0.92   -0.10  T_SPF_PASS
|   0.063   0.4577   0.0295    0.939   0.74    0.10  T_SPF_FAIL
| 
| 3% of nonspam gets SPF "pass", 0.45% of spam gets "fail" -- which isn't
| bad, given how early in the stdization process it's at.
| 
| Ignore the 0.0295% -- that was an error in my own SPF setup, cough ;)
| 
| So how naughty is it to use HELO data instead of MAIL FROM for the
| SPF check? ;)
| 

If you update your version of Mail::SPF::Query, you should see that it
actually wants a helo argument.  It's needed for the null-sender case
--- MAIL FROM: <>.

NAME
       Mail::SPF::Query - query Sender Permitted From for an IP,email,helo

SYNOPSIS

         my $query = new Mail::SPF::Query (ip => "127.0.0.1",
                                           sender=>'foo(_at_)example(_dot_)com',
                                           helo=>"somehost.example.com");
 

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡