-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of M Z R
Sent: Tuesday, November 30, 2004 10:09 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: [spf-discuss] Broken SPF implementation
Hi Guys,
Is there a dedicated list or entity where broken SPF implementation
(both publishing and checking) can be reported?
I got this guy rejecting every domain with "-all" stating that the
mail came from an arbitrary IP (10.65.65.1). The following will
explain:
----- The following addresses had permanent fatal errors -----
<xxxxx(_at_)stream-net(_dot_)com>
(reason: 550 10.65.65.1 does not pass SPF requirements for domain
xxx(_at_)qalacom(_dot_)com)
----- Transcript of session follows -----
... while talking to mail.stream-net.com.:
MAIL From:<xxx(_at_)qalacom(_dot_)com> SIZE=4139
<<< 550 10.65.65.1 does not pass SPF requirements for domain
xxx(_at_)qalacom(_dot_)com
554 5.0.0 Service unavailable
Anybody who is publishing with "-all" can verify that this guy is
reporting the IP "10.65.65.1" as the sending host for all domains that
terminates with "-all". I already sent email to the post master of the
server.
Probably his mail server is inside a firewall, and the firewall is using port
forwarding and reverse
NAT to protect the mail server.
Hence his mail server sees *all* connections as originating from the internal
interface of his
firewall (10.65.65.1)
This should probably be in the FAQ or "what not to do". :)
Terry Fielder
Manager Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
terry(_at_)greatgulfhomes(_dot_)com
Fax: (416) 441-9085
Regards,
MZR
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper! http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily
deactivate your subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com