In <200403201503(_dot_)47209(_at_)linuxrulz> Alain Knaff
<spf(_at_)misc(_dot_)lka(_dot_)org(_dot_)lu> writes:
What we can do about it:
------------------------
1. Do not apply SRS encoding for mails where we already do SRS
decoding.
2. Or, only apply encoding for From eaddresses whose domain publishes SPF
3. (or maybe easyer to implement): only apply SRS decoding if From is
<> or <postmaster@ ... >
4. Some throttling mechanism (limit number of SRS encoding /decoding
operations per minute that come from a same IP or IP range)
5) When sending out a message that was due to an SRS0 bounce, use a
null from address (<>) like you are supposed to use. There is no
reason to generate a new SRS0 for the MAIL FROM address, even if it
isn't null.
-wayne