spf-discuss
[Top] [All Lists]

RE: New SPF RR type and broken DNS servers

2005-08-04 12:54:42
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of Stuart 
D. Gathman
Sent: Wednesday, August 03, 2005 4:35 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: [spf-discuss] New SPF RR type and broken DNS servers



Consider the domain szco.com
$ host -t txt szco.com
;; no records
$ host -t type99 szco.com
;; connection timed out; no servers could be reached

Obviously, the DNS for szco.com is braindead.  However, this is an
important customer of my client, and they are unlikely to fix their DNS
server in the next 10 years.  So I have to work around the braindamage
someway.  What do people think about this tweak to checking for both TXT
and SPF:


check for TXT record
if no TXT SPF record:
 try:
   check for type99 SPF record
 except DNSTimeout:
   pretend there were no type99 SPF records either

Strictly speaking, the way I read the current draft, this situation requires
a TempError, except that we know it's not temporary on the timeline of
e-mail message delivery.

I think it's the way to go.  This is probably another case for your relaxed
checking.  Possibly strict and certainly harsh processing should raise a
TempError for this (e.g. TempError - Braindead DNS...)

Scott K


<Prev in Thread] Current Thread [Next in Thread>