Theo Schlossnagle wrote:
Mark Shewmaker wrote:
On Sun, 2005-09-11 at 18:40 -0400, Theo Schlossnagle wrote:
Recipients are not always the ones configuring aliases
that send mail to them. Others may do so legitimately as well.
Other than in the /etc/aliases style of forwarding, (which is still done
with the implicit permission of the receiver), where is it common that
other people set up forwarding aliases to your accounts?
If you join the board of you local home-owners association and they "add
you" to the alias. Any relatively small, relatively static group can
easily be placed into an aliases style forwarding where the members of
said group indeed want the email and yet did not formally request for
the alias to be set up.
The Administrator of such a "home-owners association" is deeply at fault here. I trust
that you would not add users willy-nilly to /etc/aliases without some thought about the
implications? The solution is simple, either the forwarding MTA has it's own SPF record
and re-sends the mail rather than just shoveling it on, or the final destination MTA white
lists that forwarder.
In either event the user does nothing - the MTA admins are the ones who have to
do the work.
I don't have a problem with ISPs acting any way they please. It isn't a
regulated industry yet. Those that please their users retain them,
those that don't do not. I'm not an ISP, we just work with a lot of
them. If my ISP required that I tell them what possible IP space would
be forwarding mail to my account, I'd switch. First, it isn't really
their business, it is their business to recieve mail that I have sent to
that address.
The forwarders know who they are forwarding to, and have to take responsibility for
publishing their own SPF record and resending mails, or telling the MTA they are
forwarding to of their identity and the that of the recipient of the forwarded mails.
Slainte,
JohnP
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com