From: Greg Connor
Sent: Thursday, April 08, 2004 3:29 AM
<...>
--Jim Ramsay <i(_dot_)am(_at_)jimramsay(_dot_)com> wrote:
I would suggest that maybe an explicit match is too strict. My
explanation is long-winded, so please bear with me :)
[...]
I propose a way of matching the Envelope to the Headers "within reason":
That is, if the domain is mostly the same, and the front-part is mostly
the same, consider it "first-class". For example, I think this could be
considered close enough to say that an email is "first-class":
This might be too permissive for my tastes. In general I don't like
assuming that a domain name is "close enough" - in my mind it is
either the
same domain or it isn't.
Very strongly agree.
<...>
I would instead do something like:
SPF (MAIL FROM)
SPF (Sender:)
SPF (From:)
consider SPF (Reply-To:)
Domain(MAIL FROM) = Domain(Sender:) and both PASS: Second class
Domain(MAIL FROM) = Domain(From:) and both PASS: First class
evaluate results of test on Reply-To:
--
Seth Goodman