How is SPF faring against the Zafi.b virus. This Hungarian originated virus
initiates a Dictionary attack on domain names that if finds on the infected
machine. It does not use DNS to find the MX records, but instead guesses
the host name (such as 'mail' or 'mx'), prepends it to the domain name, and
then proceeds with it's dirty work using Hungarian sounding names.
This virus uses the proper MAIL FROM: domain name for the sending IP range,
but if the SPF records are set up properly (as is ours), the IP used should
not be authorized.
J.A. Coutts