Greg Connor wrote:
Actually I think I see where Seth is going here. The ses: implies that we
are checking the MAIL FROM: of the original hop, not the rewritten MAIL
FROM.
There is no need of a "ses:" mechanism that says "check the originating MAIL
FROM" because we see the "ses:" mechanism only if we are checking the SPF
record of the originating MAIL FROM. (The SPF record of the forwarder most
probably does not have a "ses:").
Be we need a modifier that says "don't check the SPF record of the
forwarder".
Roger