Re: Overly broad ip range in spf - think like a spammer

On Wed, Jul 28, 2004 at 02:43:58PM -0400, David Brodbeck wrote:
> On Wed, 28 Jul 2004 12:23:00 -0400, Thomas Harold wrote
> > For the company that I work for, we're publishing extremely 
> > restrictive SPF records with a "-all" on the end.
> The important thing here is that it's YOUR CHOICE.  The whole point of SPF is
> that sending domains can pick a policy that works for them.  I think that's
> getting lost in this discussion about whether certain policies should or
> shouldn't be allowed.
That's correct, but if things work out as we think it is, choosing a
promiscuous policy that includes a large part of the internet will have
consequences. There is no extortion here, this is a projection, a
prediction of what will happen if things work out as we think they will.

The choice is everyone's own. As said, you can choose a promiscuous
policy, you can choose to be an open relay, etc.. etc.. In the end, it
will have consequences, whether one likes this or not. If one's
particular policy makes it easier for others to use one's domains
instead of some other domain with more restrictive policies.

I don't think the discussion was about whether certain policies are or
are not allowed, and as far as I'm concerned everyone can publish
whatever policy they want. This doesn't erase that if our predictions work out
the way we think they will (and of course, predictions can be wrong),
people who publish promiscuous policies will get problems. Better to
warn them now, perhaps convince them something else is possible.

Koen

-- 
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Send us money!  http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

pgpIRV6xjmOxQ.pgp
Description: PGP signature