spf-discuss
[Top] [All Lists]

Re: Zonecuts specified in SPF draft

2005-01-14 07:28:34
Roger Moser wrote:

If server16 is authorized to send mail, add a record for its
domain, or add an entry in the overall domain.

So, what am I missing ?


server16.hostpoint.ch is only used for sending mail from a website. Normal
mail is sent from mail.hostpoint.ch. Obviously the administrator forgot to
publish an SPF record for server16.hostpoint.ch. Now if he changes "?all" to
"-all" (still forgetting server16.hostpoint.ch), then mail from
server16.hostpoint.ch will be rejected.

Note that this is just an example.

It is an example of a misconfiguration.

If your mail bounces because you are on an open relay list, you fix it.
If your mail bounces because you have a bogus HELO, you fix it.
If your mail bounces because your SPF record doesn't match what you
are really doing, you fix it.

It isn't rocket science. Misconfigurations happen, you fix them.

--
Daniel Taylor          VP Operations            Vocal Laboratories, Inc.
dtaylor(_at_)vocalabs(_dot_)com   http://www.vocalabs.com/        
(952)941-6580x203