spf-discuss
[Top] [All Lists]

Re: A Question about the pobox.com wizard

2003-12-15 19:05:39
On Sun, 14 Dec 2003, Brian Hatch wrote:


So, that begs the question: when it suggests the records

  'mail.ifokr.org:v=spf1 a -all:3600
  'puddle155.drizzle.com:v=spf1 a -all:3600

I don't actually control drizzle.com (it's my ISP) so I can't
make that second change for my MX.  Regardless, should I need
it?  Or for that matter, why are we supposed to list the MX
hosts separately?  If I intend to only mail out using @ifokr.org,
are they necessary?

If either machine bounces a message the MAIL FROM: will be the null sender:
'<>'.

Obviously we can't do an spf lookup on that, so spf falls back onto the smtp
HELO string, which would be "mail.ifokr.org" or "puddle155.drizzle.com".

To stop spammers pretending everything they send is a bounce these hostnames
need spf records too, the "v=spf1 a -all" just says 'any A record from
"mail.ifokr.org" is allowed to claim to be "mail.ifokr.org" in any email
they send'.

-- 
[http://pointless.net/]                                   [0x2ECA0975]

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡