On Wed, 21 Jun 2006, Alex van den Bogaerdt wrote:
My reasoning is that while there are many uses for a neutral
result in MFROM SPF records, there really is no excuse to use it
for HELO. Comments?
The host with name "example.com" sends mail for domain "example.com".
Various other hosts may also be sending mail for this domain.
The host uses its FQDN in HELO: example.com
They want "?all" (due to those various other hosts), you want them
to publish "-all". You are probably correct in more than 99.9% of
all cases. But you should think about this remaining 0.1% as well.
Yes, they can change their hostname. But this is not necessary for
any other reason than to satisfy your local(!) policy.
They do not need to change their hostname or publish -all. They just need
to ensure that the SPF record gets pass for the MTAs that use example.com in
HELO. The SPF can be neutral for all the other hosts sending mail
with example.com in MFROM. But the set of MTAs using example.com
in HELO can only be finite and are not roaming, and can therefore
easily get a pass.
If their set of MTAs (as opposed to clients sending mail with example.com
in MFROM) consists of thousands of Windoze PCs at random ISPs with
constantly changing IPs running background mail software, then I don't want any
of their mail anyway. :-)
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com