spf-discuss
[Top] [All Lists]

Re: is sender rewriting really necessary?

2003-10-06 11:57:44
Hi !!

Now the question is, how will pobox deal: with sender rewriting or
something else?  And if it's something else, we need to come up with it
fast.

I agree, email forwarding is widely used and spf itself does not come
with a good solution to deal with this.

The problem is that the solution has to be implemented at the site that
does the email forwarding as spf will break email forwarding done at
that sites. The simplest solution will be to just replace the envelope
sender with a local email address (i.e. postmaster(_at_)pobox(_dot_)com), this
way the postmaster will receive the errors generated when forwarding
(which is both a good and a bad thing). They can also do some sort of
sender rewriting which will allow delivery errors to be redirected to
the original sender but has some security problems. If you do not want
to touch the envelope sender then you could add a xtext argument to
the MAIL FROM smtp command to tell the remote mailer which domain to use
in spf tests (this also has some secuirty concerns and will also break
communication to mailers like postfix that do not fully implement rfc's)

--
Best regards ...

Discoveries are made by not following instructions.

----------------------------------------------------------------
   David Saez Padros                http://www.ols.es
   On-Line Services 2000 S.L.       e-mail  david(_at_)ols(_dot_)es
   Pintor Vayreda 1                 telf    +34 902 50 29 75
   08184 Palau-Solita i Plegamans   movil   +34 670 35 27 53
----------------------------------------------------------------

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>