Thanks for writing that up.
I think making this into a mandatory daily report will make the feature
less likely to be implemented. Programs that do SPF processing will
probably find it easier to immediately queue up a single incident report
with all the data they already have rather than storing the data on disk
and generating a report later. The daily report is more complicated.
Could we add a "reportdaily" option for domains that only want to receive
daily reports or nothing at all. The term "report" would mean individual
incident reports or daily reports, or nothing - whichever the SPF program
chooses to implement. The report format for single incidents would be
the same as for the daily report.
For example in my case, probably the only place where my domains
are truly forged is on inbound spam. The rest of the forgery reports
will likely be mis-configurations that need to be fixed. I expect my
volume will be low enough that I won't mind having a per-incident
report if it means that more programs are willing to implement this
feature.
Also, instead of summarizing with a count, we probably need to list
each incident along with an RFC-822 date/time. This would be helpful
for tracking down who was responsible.
This is a good idea. I have added it to the official list of unofficial
directives at http://spf.pobox.com/extensions.html.
Other extensions are welcome; please provide a formal specification if
possible.
On Sat, Oct 25, 2003 at 08:41:55PM -0700, Sam Horrocks wrote:
|
| The reporting directive would look something like this:
|
| report(_at_)?þP©Ó?H,1&-; ì?Ò7¡ ?Ú]
|
| When an MTA sees this directive in a domain's spf record, and gets a
| forged sender in that domain, it will generate a report to this address
| letting the administrator know of the forgery.
|
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡