spf-discuss
[Top] [All Lists]

Re: Unified SPF: example with single domain, multiple machines

2004-06-18 13:26:10
On Fri, 18 Jun 2004 16:01:00 -0400, Meng Weng Wong wrote:
<snip>
    192.0.2.1 sends mail with

      HELO example.com
      MAIL FROM:<user(_at_)example(_dot_)com>
      From: <user(_at_)example(_dot_)com>

    192.0.2.10 sends mail with

      HELO mx10.example.com
      MAIL FROM:<user(_at_)example(_dot_)com>
      From: <user(_at_)example(_dot_)com>

    192.0.2.11 sends mail with

      HELO mx11.example.com
      MAIL FROM:<user(_at_)example(_dot_)com>
      From: <user(_at_)example(_dot_)com>

    Unified SPF asks example.com to publish four SPF
    records:

       example.com TXT "v=spf1 a mx -all"
   www.example.com TXT "v=spf1 a -all"
  mx10.example.com TXT "v=spf1 a -all"
  mx11.example.com TXT "v=spf1 a -all"
<snip>

Not happy to disagree with Meng, but here goes

In the above example SPF records, I believe that

  www.example.com TXT "v=spf1 a -all"

is incorrect, and should be

www.example.com TXT "v=spf1 -all"

Since www.example.com should/would never be a sender domain, 
and for a bounce it would use it's HELO of example.com as the 
sender domain

Regards
Karl Prince


______________________________________________________________
Email via Mailtraq4Free from Enstar (www.mailtraqdirect.co.uk)


<Prev in Thread] Current Thread [Next in Thread>