spf-discuss
[Top] [All Lists]

RE: Handling of -all

2005-02-14 08:21:12
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of Nico 
Kadel-Garcia
Sent: Sunday, February 13, 2005 10:25 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] Handling of -all

...
There's a booby trap here. "Should be delivered" is not the same thing as
"not rejected by SPF". SPF is not an *approval* method, it's a *rejection*
method. Any other filtering the recipients are doing can certainly
still be done.
...
Yes, SPF actually supports more reliable filtering for both filtering in and
filtering out.  As an example, spammers will often set mail-from/from =
receipt to address.  As a result, without SPF, you can't whitelist yourself
in a spam filtering program like SpamAssassin.  Post SPF (since you've
already rejected the forgeries if your record ends in -all), you can safely
whitlist your own address since the forgeries don't make it that far.

I did not mean to suggest that an SPF pass should bypass normal filtering.

Scott Kitterman


<Prev in Thread] Current Thread [Next in Thread>