David wrote:
that's why i think helo checks should not be part of spf, spf is
Sender Policy Framework, it takes care of the Sender. Helo checks
are great at detecting viruses but should be dealed separatelly.
Normally the SPF record for the HELO domain is "v=spf1 a -all" and that may
be used as a fall-back if there is no SPF record for the HELO domain.
But Hotmail is different. They say "EHLO hotmail.com". So there must be a
way for Hotmail to publish which MTA's (which IP addresses) are allowed to
say "EHLO hotmail.com". That is Hotmail's policy, so it is the sender's
policy (SPF). Since for empty return-paths that is already specified for
spf1, no change is required.
Roger