We have the 1999 RFC 2505 called "Anti-Spam Recommendations for SMTP MTAs."
We used it for our own system.
What are you comments, if any on this document? Can it be updated for
today's environment to include SPF information?
There are some comments in the doc that might relate to SPF. The following
are off the top of my head:
2.4. Log anti-relay/anti-spam actions
SPF should borrow some of the RFC emphasis on logging. Logging is/will be
very important as sender authenthentication becomes more main stream. For
example, CANSPAM basically mandates if a system is going to attempt to
pursue a CANSPAM violation charge against an offender.
2.5. Refuse mail based on SMTP_Caller address
Althought it touches based with an admain defined white/black list, it
should be updated with SPF rejection methods and/or information.
2.7. Refuse based on "MAIL From:"
Should be updated with SPF information.
Sincerely,
Hector Santos, CTO
Santronics Software, Inc.
http://www.santronics.com
305-431-2846 Cell
305-248-3204 Office