spf-discuss
[Top] [All Lists]

Re: SPF implementation error

2004-05-13 10:18:48
Roy Badami wrote:

"Mark" == Mark  <admin(_at_)asarian-host(_dot_)net> writes:

    Mark> Instead, if you must do SPF at the LDA phase, have your MTA
    Mark> add an extra, local header, which specifically holds the
    Mark> envelope-from (if it does not already do so; sendmail does),
    Mark> and use that.

In fact, RFC 2821 requires final delivery to add a header containing
the envelope-from.  And the name of that header is Return-Path :-)

But, as is clearly the demonstrated case, you cannot safely rely on that 
header, or even on its existence at delivery phase. And if it exists, it is not 
always a certainty that the mailing list software replaced a pre-existing one. 
And people's idea on what "final delivery" is, seems to vary too.

Not that this is relevent to the case in point, because we're talking
about an SMTP-time rejection.  So the only address that should be used
is the argument to the MAIL FROM command.

Yes. At SMTP dialogue time you should only ever use the envelope-from (or HELO 
string, in the absence thereof.)

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx


<Prev in Thread] Current Thread [Next in Thread>