On Fri, Dec 10, 2004 at 08:30:46PM +0100, David wrote:
one step further ... I want my domain (ols.es) to have an spf record
like "mx ~all", but i don't want anybody to use ols.es in the hello,
including me (as i always use full hostnames in my hello). How can
I specify this policy ??
With strict helo checking by the receiver (which I think will
happen more and more), only machines actually named "ols.es"
can use that for HELO.
These also happen to be your MX records, and your SPF policy
is "mx ~all".
Once the "~all" is turned into "-all", only the MX records
would be able to use ols.es as HELO string. The person controlling
those boxes will make sure this doesn't happen so I wonder what
the problem is? (no, that is not a rhetoric question!)
Alex