I agree with the statement about "grandma" and think it should be
somewhat user friendly.
forger.biz [1.2.3.4] is not allowed to send mail with the domain
"forged.org" in the sender address. Contact
postmaster(_at_)forged(_dot_)org(_dot_)
I do have a quick question, I just set up a SPF string on my DNS hosting
and when I test it I get the response
SPF lookup of sender user(_at_)mydomain(_dot_)com
<mailto:user(_at_)mydomain(_dot_)com> from
IP X.X.X.X:
SPF string used: v=spf1 ip4:X.X.X.X/28 ip4:X.X.X.X/28 mx ptr ~all.
Processing SPF string: v=spf1 ip4:X.X.X.X/28 ip4:X.X.X.X/28 mx ptr ~all.
Testing 'ip4:X.X.X.X/28' on IP=X.X.X.X, target domain X.X.X.X/28, CIDR
28, default=PASS. MATCH!
Testing 'ip4:X.X.X.X/28' on IP=X.X.X.X, target domain X.X.X.X/28, CIDR
28, default=PASS.
Testing 'mx' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=PASS.
Testing 'ptr' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=PASS.
Testing 'all' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=SOFTFAIL.
what would cause a softfail on the ~all"? I am within range of my ip
addresses specified. Thanks in advance
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com] On Behalf Of David
MacQuigg
Sent: Thursday, February 24, 2005 5:16 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: RE: [spf-discuss] Handling of -all
At 11:56 PM 2/24/2005 +0100, Julian Mehnle wrote:
Guy [pobox(_at_)watkins-home(_dot_)com] wrote:
I think the point was that many people will be just confused by
"example.com is not authorized to use address [1.2.3.4]"
A proper SPF fail error message would read:
forger.biz [1.2.3.4] is not allowed to send mail with the domain
"forged.org" in the sender address. Contact
<postmaster(_at_)forged(_dot_)org>.
which is even harder for Grandma to understand than the first message.
I think Guy has raised a valid concern, but I still agree with you that
the solution isn't to ignore the clearly stated meaning of "-all".
I see ignorant but innocent people, like Grandma, having a problem, but
no more than what is starting to happen already with spam filters
rejecting good messages. For the first time in years I feel like I need
to call and confirm receipt of messages.
In this scenario, the lazy domain, 'example.com', will start losing
customers to aol.com. Grandma may not understand the reject message, or
even think to report it to her ISP, but her relatives will surely urge
her to find another ISP.
-- Dave
************************************************************* *
* David MacQuigg, PhD * email: dmq(_at_)gain(_dot_)com * *
* IC Design Engineer * phone: USA 520-721-4583 * * *
* Analog Design Methodologies * * *
* * 9320 East Mikelyn Lane * * *
* VRS Consulting, P.C. * Tucson, Arizona 85710 *
************************************************************* *
_____
Sender Policy Framework: http://spf.pobox.com/ Archives at
http://archives.listbox.com/spf-discuss/current/ Read the whitepaper!
http://spf.pobox.com/whitepaper.pdf To unsubscribe, change your address,
or temporarily deactivate your subscription, please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper! http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com