spf-discuss
[Top] [All Lists]

Re: how to protect the HELO using SPF

2004-02-24 15:22:46
On Tue, Feb 24, 2004 at 03:51:12PM -0600, wayne wrote:
| 
| On a somewhat related subject, it would be nice if you could mark SPF
| records as being valid for include: mechanisms only.  It is awfully
| tempting to use something like include:%{l}.spf.%{d}, and have that
| resolve to "v=spf1 +all" in some cases.  However, that opens up those
| subdomains for being abused.
| 

I believe the way around that is to make the subdomain have no A or MX record.