-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Constantine A. Murenin wrote:
What about macros with "h = HELO/EHLO domain"? How could I set it to test
if the HELO/EHLO domain resolves to an ip-address of the connected
client, along with the testing that the domain is in the example.name
zone?
The problem with the %{h} macro is that the HELO/EHLO domain is not
_guaranteed_ to be verified. The SPF specification recommends that
implementations check the HELO domain, too, but it isn't mandated for
historical reasons.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFClOS5wL7PKlBZWjsRAvvyAJ9Prat+Nn6ln1uKyFXnjS0CAaMv7QCg8hGg
QuTyrq0poLzgW/aw1te+XLM=
=tvi9
-----END PGP SIGNATURE-----