spf-discuss
[Top] [All Lists]

BP mechanism for debugging

2003-10-20 15:55:03
On Mon, Oct 20, 2003 at 10:40:16AM -0700, Ted Cabeen wrote:
| Hey.  Is there any functionality in the SPF system for debugging?  I
| think it would be nice for a domain publishing SPF records to be able
| to request that messages bounced by an SPF-compatible server be
| forwarded to postmaster@<SPF domain> for debugging purposes.  This
| would allow admins that are setting up SPF to evaluate the effect it
| has on their mail flow, and would help in finding hosts that are
| forging mail as them.

re finding hosts that are forging mail: the PI mechanism lets you do
this.  configure a PI directive but don't put anything in the
corresponding zone; then watch your dns server logs.  of course you
don't actually see the message body.

I do plan to add a validator so you can send a test message from every
server you can think of and the system writes back saying if it was
approved or not.

or it could just spf reject it, converting softdeny into deny.  mmm.

| We could enable this functionality by adding a "bp" flag to the
| SPF TXT record that would request the bounces to postmaster.  This
| sort of functionality would also help operators of trusted-forwarders
| DNSWLs to identify new domains that need to be added to the list.
| 

a "bp" extension would be nice, but it's too much of a burden to require
implementation.  if you want to implement such a system, though, you are
welcome to: that's why i added the extensions syntax.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>