Re: Are SPF fault tolerant ? How to make SPF records changed correctly ?

On Tue, Jul 13, 2004 at 11:29:11PM +0300, Andrew G. Tereschenko wrote:
> [Ralf Doeblitz]
> > If you are using dialup lines with a dynamically assigned ip address,
> > your ISP should publish a matching SPF record that you can include or
> > redirect to in your own SPF record.
> >
> > If you have a static allocation, your ISP should notify you of any
> > changes well ahead of time (at least one week, better two or more) so
> > you can modify your DNS data accordingly.
> Current Internet business is not simply ISP and client.
>
> ISP can inform their reseller on address changes, but reseller can forget to
> notify you/use your outdated email or simply ignore ISP warning, as they
> will find it's not valuable.
Bad ISP, change ISP.

> As well your company administrator can be on two weeks Hawaiian Vacation.
Not well-run business. Always make sure important things are handled if
the normally responsible person is on a vacation. What if the web server
crashes, and the responsible person is on a 2 week vacation to hawaii??
What if your company falls victim to a traditional breaking-and-entry,
and the person responsible for repairwork is on a 2-week vacation? What
if a customer has a complaint, and the person responsible for the
account is on a 2 week vacation?? Do you just say 'well sorry wait 2
weeks for x to get back'..??

> Do you wish to create SPF records change burden simply because your ISP
> decided to optimize their network?
What's your suggestion for a solution to this problem?


> This make impossible for ISPs to optimize their mail flow by using
> additional outgoing MTA. For example Ukrainian ISP will be unable to use
> dedicated Russian server to optimize traffic pattern for emails like
> user(_at_)domain(_dot_)RU
Anyway, if you use your ISP's outgoing mail servers you should really
include their SPF record, any other setup is suspect to the problems you
describe here. So the only problem I see is: how to get your ISP to
publish their outgoing smtp servers in SPF records?

Koen

-- 
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Send us money!  http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

pgphxcT1srpvu.pgp
Description: PGP signature