Hiya Julian,
Thanks for your reply.
Julian Mehnle elucidated on 14/11/06 17:36:
Jon Grant wrote:
One query I thought of over night was:
We are essentially hoping that other servers run SPF right? and if we
get an email from a server which isn't checking SPF do we have a way to
know that?
No. But we can still do our own SPF checking, and if the forwarder (here:
Paypal) hasn't rewritten the sender address to be in their own domain,
there's a high probability that the SPF check will fail (and rightly so).
Just to check I follow correctly. Do you mean "rewritten"? i didn't
think it was being changed from anything..
Then today I got this genuine bounce email below, for a Paypal
transaction I made! What a coincidence right! Maybe to be expected as
my ISP finally applied my SPF settings to jguk.org's DNS
Now the problem is because Paypal are putting my own email address in
the from field...?
Absolutely, that's Paypal's fault.
I wonder how this message was generated by my ISPs mail server. It
looks a bit unclear to me:
<jg(_at_)jguk(_dot_)org>: host rhea.easily.co.uk[212.53.64.82] said: 550
"Mail from
jguk.org is denied from host 64.4.240.67 SPF" (in reply to RCPT TO
command)
I think something like: "Your machine 64.4.240.67
(smtp-outbound.nix.paypal.com) is not authorised to send email from
jg(_at_)jguk(_dot_)org (in reply to RCPT TO command)"
Not sure if suggestions can be passed on to who ever implements the
messages in different MTAs.
Kind regards
Jon
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735