A couple of responses in one:
First, Sam originally wrote
Also, it might be a good idea to force reporting addresses to be
in the same domain where they are listed to ensure that reports
aren't sent somewhere bogus.
I don't think that this would be helpful. In the situation where an
organization has their email provider outsourced, the email hosting provider
would probably want to be the one to receive the messages and would likely
want to have a single inbox for all such reports. For them to have a
mailbox in each of their client's domains would not be likely or efficient.
Second, with regard to Graham's message below, I would rather have all of
the data and filter through it myself, rather than it being filtered for me
elsewhere. Additionally, as SPF becomes more prevalent, 'Joe jobs' should
be reduced.
-----Original Message-----
From: Graham Murray [mailto:graham(_at_)gmurray(_dot_)org(_dot_)uk]
Sent: Sunday, October 26, 2003 5:47 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] SPF reporting mechanism
Sam Horrocks <sam(_at_)daemoninc(_dot_)com> writes:
To help out I'd like to see SPF add an optional reporting directive.
This directive would indicate to MTA's on the internet that I want
an email report when someone tries to forge a sender in my domain.
In this report I'd like to see the sender and recipient addresses and
the IP address of the smtp client.
Whilst I think this is a good idea, in some circumstances it could
cause a problem. If your domain became the victim of a 'Joe job' then
you might find yourself getting rather more SPF failure reports than
you expected. It would be nice to know about where Joe jobs originate,
but you only really need to be told once and not by every recipient of
said Joe job.
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡