Paul Howarth wrote:
in a scoring-based scheme, mail purportedly coming from a
domain that has published SPF records but not getting a
"pass" is considerably more likely to be spam than mail
coming from a domain that has not published SPF records at
all.
That's IMHO a bad idea. ?all should be the same as "no SPF".
You could still use PASS in your scoring somehow. Or if you
have identified domains where you insist on handling ?all like
~all you could use your own overwrites only for these domains.
I was able to discover what was going on and fix it
Good. Angry users claiming that their mails are "trashed by
SPF" won't help, publishing ?all shouldn't be dangerous. Bye.