On Sat, 2004-12-11 at 08:54, Roger Moser wrote:
o Check that the HELO string resolves to the incoming IP. Reject
if this is not true *and* the HELO string has an SPF record.
Both would reject most mail from hotmail.com.
Can you explain further?
What sort of non-matching helo strings does hotmail.com send via?
(Do you happen to know how much of the other spf domains are similarly
misconfigured, or if the number of misconfigured hosts such as
*hotmail.com is small enough to make a temporary trusted-frowarders type
workaround feasable?)
--
Mark Shewmaker
mark(_at_)primefactor(_dot_)com