I would like to use the Data From: field because it is the
one that is presented to the user.
I think I'm correct saying that in a normal and legit email the MAIL
FROM: and From: addresses are likely to be the same. The only genuine
reason I can think of off the top of my head for them being different
would be in the case of a mailing list like this one. In this email, the
From: would be me, but the MAIL FROM: would be listbox.com. As it's the
listbox IP sending the email to your server, the check should be done on
the MAIL FROM address against that IP.
If you run an SPF check on premierpc.co.uk, you will not find any IP's
for listbox.com meaning the SPF check would fail.
I think it would be a little too much to ask of domain admins to add the
IP ranges of any mailing lists that any of their users were subscribed
to, which using SPF is what would be required to check against the From:
address in this scenario.
(If any of what I've said is not correct, please don't thrown the rotten
tomatoes straight away, give me time to run!)
Regards,
Lyndon.
************************************************
Email checked by UKsubnet anti-virus service
To prevent email abuse & block spam
contact enquiries(_at_)uksubnet(_dot_)co(_dot_)uk
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300
Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)
************************************************