Just going by the options presented here, we will probably just change
our spf record to allow all mail servers to send. We have 8,000 users
and there is no way we will be able to get them to send via ssh or
through webmail. Students want to be able to use Outlook Express or
some other easily configurable mail client with fairly easy setup
options. Spf just doesn't seem like a viable answer for us at this
time.
Andrew Gutkowski
CNA, MCP, Network+, A+
Systems Administrator
Pennsylvania College of Technology
One College Avenue
Williamsport, PA 17701
agutkows(_at_)pct(_dot_)edu
570-329-4918 phone
570-321-5554 fax
alex(_at_)ergens(_dot_)op(_dot_)het(_dot_)net 4/14/2005 12:02:06 PM >>>
On Thu, Apr 14, 2005 at 11:19:22AM -0400, Andrew Gutkowski wrote:
Does anyone know if GroupWise supports SASL over port 587? I have
never
heard of this before.
This I don't know, but ...
If they don't, we will have to remove our SPF
records because we cannot have users email blocked by other email
servers.
... that isn't true. What about webmail for instance? And as a last
resort (ONLY) you could end with "?all" in stead of "-all".
I could change the SPF records to allow other email servers
to
send, but then what is the point of having an SPF record at all?
That's correct, you don't want to do that.
How you're going to do it depends on the possibilities and your
imagination,
you will have to allow your (external) users to transmit their mail
from,
or via, your infrastructure.
Possible solutions include:
- ssh access into a DMZ at your site
- webmail at your site
- port 587 access to your site
- port 25 access to your site (but this is blocked by the ISP)
and probably more. Everywhere you read "your site", you could also
have one external host, for instance an ESP, doing this for you; you'd
need to include that ESP's servers, not every ISP's servers.
cheers,
Alex
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper! http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com