I would like to be able to say in SPF for my mail domains
(e.g. cam.ac.uk):
(HELO) No machine may legitimately use this domain as a HELO argument.
(ENV) All sender addresses in this domain are signed and do not have to
come directly from one of my MTA addresses. [There is a LOT of forwarding
in my environment and I cannot break it.]
I would like to be able to say in SPF for my mail servers
(e.g. ppsw-0.csi.cam.ac.uk):
(HELO) Only this machine may use this domain as a HELO argument.
(ENV) No machine sends email from adddresses @ this domain. [Though we
accept email sent to postmaster@ this domain.]
I don't think SPF allows me to say either of these things.
--
Tony Finch <dot(_at_)dotat(_dot_)at> http://dotat.at/