spf-discuss
[Top] [All Lists]

Re: Border Appliances

2005-06-30 20:34:19
On Thu, 30 Jun 2005, Hector Santos wrote:

You don't require your roaming uses to be authorized by SMTP AUTH? how about
POP before SMTP?   I guess, you would only allow local mail submissions
only, right? <g>

I'm not talking about *my* users.  I'm talking about some other
mail admin's users that want to send my users mail.

But here is the next thing I do.  When accepting
a relaxed result, I send a dsn.  If the DSN is not accepted,

What's your experience on the feedback on this?

The DSNs are mostly ignored.  But I have gotten several replies 
from mail admins thanking me for the info.  The problem is that
users rarely inform the mail admin of the DSN.  And I don't feel
right about spamming postmaster with every DSN intended for
one of their users.

Do you see some changing?

Yes.  One admin told me he had been wanting to setup SMTP AUTH to
improve security, but hadn't had a kick in the butt.  The DSNs were just what
he needed.  He hadn't heard about SPF, and published after setting his
roaming users up with SMTP AUTH.

Do you send it every month regardless if they have not sent mail within 1-2
months??  Or do you wait until the next message for the next month?

Wait until the next message.  Just checks how long since last DSN
before using the cached CBV result.

Do you expire them? after so many months?

No.  But if the forged spam (allegedly) from the domain exceeds the limit,
relaxed results are no longer accepted.


-- 
              Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.


<Prev in Thread] Current Thread [Next in Thread>