spf-discuss
[Top] [All Lists]

Re: moving on from MARID

2004-09-28 17:19:56
On Sat, 2004-09-25 at 10:58, Meng Weng Wong wrote:

If SUBMITTER is not present, and nothing else
provides a positive result, I still want to be able to
reject based on a MAIL-FROM "fail" result.

So do I.

But if SUBMITTER *is* present and provides a positive result, I still
want to be able to reject based on a MAIL FROM "fail" result.  In other
words:

Authentication tests:

       If this test fails:  Result:
 ------------------------- ---------------------------------------------
  MAIL FROM: (SES/CBV/SPF) Reject, no matter the results of other tests.
 PRA: (SenderID/SUBMITTER) Reject, no matter the results of other tests.
   HELO: (name lookup/CSV) Reject, no matter the results of other tests.
    Content:  (DomainKeys) Reject, no matter the results of other tests.

Non-authentication tests:

      If this test fails:  Result:
    ---------------------  ---------------------------------------------
                PTR SCOPE  Reject unless there is at least one PASS
                           result from an authentication test.
            sender_agents  Reject, no matter the results of other tests.
    body From: rep/accred  Reject, no matter the results of other tests.
     env From: rep/accred  Reject, no matter the results of other tests.
           contains Virus  Reject, no matter the results of other tests.

(sender_agents sort of fits into both groups, but a sender_agents pass
shouldn't cause a non-reject after a PTR fail, so I put it in the second
group.)

-- 
Mark Shewmaker
mark(_at_)primefactor(_dot_)com