Hi there
Over the last day I've started to get emails with SPF Headers which are
Falsified (a spammer trying to be smart). (In Addition to Sending from
domains which are ?all)
A few examples are:
(Falsified by spammer ) Received-SPF: pass (217-134-246-201.adsl.terra.cl:
domain of mistress-kelly.com designates 135.72.197.46 as permitted sender)
client-ip=135.72.197.46;
(Real - the one I add) Received-SPF: neutral (mx5.orcon.net.nz:
201.246.134.217 is neither permitted nor denied by domain of
ablqvvm(_at_)mistress-kelly(_dot_)com)
(Falsified by spammer ) Received-SPF: pass
(client-200.121.139.22.speedy.net.pe: domain of barkenchirper.com designates
134.50.97.173 as permitted sender) client-ip=134.50.97.173;
(Real -the one I add) Received-SPF: neutral (mx5.orcon.net.nz:
200.121.139.22 is neither permitted nor denied by domain of
woxgzvaotk(_at_)barkenchirper(_dot_)com)
mistress-kelly.com and barkenchirper.com both have ?all which should NOT
give pass, but neutral. So I guess the spammer is trying tricks again to
make people check for a pass Received-SPF header and give it more weight not
to be spam. The strange thing is I don't think ANYTHING checks for
Recieved-SPF headers and makes its less spam if they are passes (But I could
be wrong)
Thanks
Craig
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com