spf-discuss
[Top] [All Lists]

Re: SRS and secondary MX

2004-03-18 22:06:28
On Thu, 18 Mar 2004, Greg Connor wrote:

--"Stuart D. Gathman" <stuart(_at_)bmsi(_dot_)com> wrote:

It should not SRS encode mail that is simply getting
relayed.

Forgive me if this is a stupid question, but why not?

Only because it would be unnecessary.

The secondary has to be checking SPF coming in, right?  If it does not use 
SRS then you have to white-list the secondary, because your secondary is 
not an authorized sender for all incoming mail from all domains, and if 
they don't check SPF forgeries would not be stopped.

You are correct in that saving the extra hop is probably not worth the 
extra complexity.  Perhaps when I stop having to look at envfrom addresses all
day long, it won't bother me anymore.

-- 
                        Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
      Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
      "Very few of our customers are going to have a pure Unix
      or pure Windows environment." - Dennis Oldroyd, Microsoft Corporation


<Prev in Thread] Current Thread [Next in Thread>