On Mon, 14 Aug 2006, Gino Cerullo wrote:
Example,
"v=spf1 ip4:51.0.0.0/2 ip4:66.0.0.0/2 ip4:145.0.0.0/2 ip4:245.0.0.0/2
-all"
Given that this is a valid record and short of blacklisting the
domain in question, is there anything in the SPF spec to deal with
this abuse?
SPF is primarily an anti-forgery tool. However, when using it
against spam, its main benefit is to allow you to whitelist and
blacklist by domain. I don't pay any attention to what SPF records
spammers publish. If a domain sends spam -- into the blacklist it goes,
and any further emails from that domain are used to train the
Bayes filter. It doesn't matter whether subsequent emails are
from the original spammer, or forgeries from a different spammer.
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com