spf-discuss
[Top] [All Lists]

Re: SPF and moderated newsgroups

2004-10-27 06:28:18
Hello!

On Wed, Oct 20, 2004 at 02:04:44PM -0400, Stuart D. Gathman wrote:
On Wed, 20 Oct 2004, James Couzens wrote:

state the SPF failed (because the NNTP server sends the poster's email
address incl. domain in the from envelope, and the SPF record doesn't
desognate the NNTP server/relays to send mail on behalf of that
domain).

Rather ironic considering this problem is the very flaw in SPF that has
had many a potential implementor's panties in a bunch.  As you suggest
the solution is a rather simple one.

Those NNTP servers are broken.  Imagine that SPF had never been invented.
Do you want the bounces from every failed delivery attempt of your
usenet post worldwide???  Fortunately, you only get the bounces from
failed deliveries by the broken servers - which thankfully are few.

I don't get bounces from every server on the world.

You see this:

1. I post to a moderated newsgroup
2. this gets mailed to alt-foo-bar(_at_)moderators(_dot_)isc(_dot_)org, maybe 
with
   envelope sender hannah(_at_)schlund(_dot_)de instead of 
news(_at_)server(_dot_)foo(_dot_)bar

   If this bounces, I get the bounce, which makes sense, as then
   my submission completely failed

3. moderators.isc.org forwards this to the real moderation address,
   say afb-moderator(_at_)blarfl(_dot_) moderators.isc.org either uses SRS or
   not. In both cases, if that forwarding step fails, I get the
   bounce, as it should be (because also then, my submission completely
   failed).

4. the moderators approve my posting and post it to Usenet.
   At this point, the envelope sender is discarded!

5. propagation fails on some newsfeed
   But now we're outside "mail land", so I won't get a bounce.
   Potentially the administrator of the newsfeed peers get notified,
   as with any feed failure. My envelope sender is gone anyway.

Where's the problem?

So I'd think it makes more sense to set my address as envelope sender
for moderated newsgroup submissions than not to set my address (and I'd
get no notification if my submission didn't even reach the moderators,
i.e. didn't get posted *at all*).

Kind regards,

Hannah.


<Prev in Thread] Current Thread [Next in Thread>