spf-discuss
[Top] [All Lists]

Re: SPF HELO checking

2004-12-21 19:39:05
Hello.

I have some questions about something you wrote a while ago in a message
to the SPF mailing list.  I'm writing to you directly, because I don't
believe that my question is pertinent to the general mailing list.

I hope that you don't mind this private message, and that you would
be willing to help me understand some things about what you wrote.

I am considering implementing logic that is similar to what you outline
below, and I want to make sure that I understand your algorithm.


"Roger Moser" <Roger(_dot_)Moser(_at_)rama(_dot_)pamho(_dot_)net> writes:

[ ... ]

I suggest:

If the return-path is not empty, check the SPF record for the MAIL FROM
domain and do not check the HELO string.

When you say "the return-path is not empty", I assume that you're
referring to the envelope sender, correct?


Otherwise, if the HELO string is not a valid host name with at least
one dot, accept the mail.

If I'm understanding this, it sounds like you are suggesting that the
HELO string is only checked here in the case of an empty return path,
correct?

By what you wrote, it seems that you suggest that the mail be _accepted_
here if there's an empty return path and HELO string is _not_ a valid
name.  Am I misunderstanding?


Otherwise, if there is an SPF record, check the SPF record.

... check the SPF record on the return path?  on the "mail from" string?
on the HELO string?  on more than one of these?


Otherwise, use the SPF record "v=spf1 a ~all" or "v=spf1 a -all".

Roger

Thanks again.

Sincerely,

- Lloyd


-- 
 Lloyd Zusman
 ljz(_at_)asfast(_dot_)com
 God bless you.


<Prev in Thread] Current Thread [Next in Thread>