spf-discuss
[Top] [All Lists]

Re: Some kind of AOL authentication is going on?

2004-06-02 14:26:03
On Wed, 2004-06-02 at 17:02 -0400, George Young1 wrote:
Well now I curious Carl

Some kind of filtering is going on. Within 5 hours of creating a SPF
resource record in our DNS for our domain GLDATA.COM, the number of
reject messages from AOL dropped dramatically.

Unfortunetly for us (and others)  our domains are being fraudently used
by spammers, resulting in about 10% of our email now being rejects from
other servers.


--Michael Weiner <hunter(_at_)userfriendly(_dot_)net> wrote:

well a dig shows the following:

aol.com text = "v=spf1 ip4:152.163.225.0/24 ip4:205.188.139.0/24
ip4:205.188.144.0/24 ip4:205.188.156.0/23 ip4:205.188.159.0/24
ip4:64.12.136.0/23 ip4:64.12.138.0/24 ptr:mx.aol.com ?all"

so, that totally goes against what Carl Hutzler was saying. I can verify
this with a few of my contacts over at the AOL Postmaster department if
you want, but its out there in the public domain....


Carl stated that they are not using SPF for checking inbound mail... The presence of the TXT record doesn't conflict with that.

My guess is that they probably won't turn on SPF checking for all inbound mail until they are reasonably sure that the forwarders are either rewriting or are whitelisted.

The AOL postmaster site mentioned that they will use other people's SPF records to establish whitelisting -- that is, if you are on the whitelist, your mail will get priority treatment IF it complies with your SPF record. My guess is that they haven't actually started this yet. I don't think this would affect George's case, unless George is on the AOL whitelist...


--
Greg Connor <gconnor(_at_)nekodojo(_dot_)org>