spf-discuss
[Top] [All Lists]

Re: what to do about subdomains?

2004-01-08 16:41:09
On Thu, Jan 08, 2004 at 06:37:24PM -0500, Philip Gladstone wrote:
| I just realized that, while I have an SPF record for 
| gladstonefamily.net, there is nothing to stop somebody from sending mail 
| from foo.gladstonefamily.net as the sending domain. This particular 
| domain does not exist. Alternatively, somebody could use a name that 
| does exist in my domain.
| 
| What should I do? Does every single entry in the domain need an SPF 
| record, including a wildcard? This could be a configuration nightmare.

You only need SPF accompaniment for entries that have A or MX records.

In an ideal world, you'd only need them for MX entries, but the
"implicit-MX" rule has been grandfathered for so long that it's still
possible for a spammer to joe-job your laptop.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>