spf-discuss
[Top] [All Lists]

Re: Protecting more than just the envelope-from

2003-10-16 14:06:02
On Wed, Oct 15, 2003 at 09:28:38PM -0500, wayne wrote:
| In <20031015181620(_dot_)GD2345(_at_)dumbo(_dot_)pobox(_dot_)com> Meng Weng 
Wong <mengwong(_at_)dumbo(_dot_)pobox(_dot_)com> writes:
| 
| > This is solved!  See the "scope" modifier.
| >
| > 
http://archives.listbox.com/spf-discuss(_at_)v2(_dot_)listbox(_dot_)com/200310/0121.html
| 
| ;->
| 

SPF handles (theoretically) these three forgeries:

1)  MAIL FROM:<service(_at_)paypal(_dot_)com>

2)  HELO paypal.com
    MAIL FROM:<>

3)  HELO [1.2.3.4]
    MAIL FROM:<>
    From: service(_at_)paypal(_dot_)com (PayPal Customer Service)

The only remaining concern is:

4)  HELO [1.2.3.4]
    MAIL FROM:<>
    From: bogus(_at_)non-spf-publisher(_dot_)com (PayPal Customer Service)

which we really can't do anything about.  Comments feel sorta inviolate.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡