But if I can use any email address (within my domain maybe). I will have
control. If needed, I can delete the email address, or change the spf
record. I like the option, you don't need to use it!
Eg. "spf1 -all report=forged(_at_)%(d)"
If needed, I would delete the email address "forged(_at_)domain(_dot_)com"
BTW, the 1 million spf hits to my DNS server may be enough to kill my
system! My cable modem can only do so much!
Guy
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com] On Behalf Of Roger
Moser
Sent: Tuesday, October 12, 2004 2:37 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: [spf-discuss] spf entries for which hosts ???
Meng Weng Wong wrote:
There are two ways to report this information back to domain owners:
they can use an "exists" for logging, or they can help develop a
reporting syntax, eg. v=spf1 -all report=postmaster+spf(_at_)%{d}
If a spammer sends one million e-mails with the spoofed domain, then with
"v=spf1 -all report=postmaster+spf(_at_)%{d}" the poor postmaster will receive
one million e-mails.
Roger
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
http://www.InboxEvent.com/?s=d --- Inbox Event Nov 17-19 in Atlanta features
SPF and Sender ID.
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com