spf-discuss
[Top] [All Lists]

Re: SPF for Sendmail, without milter - preferably a ruleset

2004-01-08 10:59:04
In <3FFD8B90(_dot_)3060807(_at_)gladstonefamily(_dot_)net> Philip Gladstone 
<philip-spf(_at_)gladstonefamily(_dot_)net> writes:

Meng Weng Wong wrote:

That would work, but I'm worried that we'll see a scaling problem [...]

You are exactly correct -- it would only be of use during a migration
period. The problem would then become of weaning people off the magic
DNS server, and onto native code.


I agree with the scaling problems and the problems of weaning people
off the magic DNS server.  However, the "solution" to both of these
problems may be each other.  If a timeout/lookup failure is failsafe
(it should be), then simply letting the magic DNS server get
overloaded will natually cause people to stop using it.

This would let many MTAs, not just sendmail, to very quickly add a few
lines to their config, see that it works well, notice that "#(_at_)^$%^
this is slow!" and then go through the effort of doing it right.  For
systems that do very little email processing, this could still be a
good, semi-long term solution.  They wouldn't need to worry about
keeping the SPF software up to date.

Once all MTAs come pre-configured with SPF checks enabled, the magic
DNS server can completely go away.


-wayne

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡