spf-discuss
[Top] [All Lists]

RE: [spf-discuss] Useful SPF results

2006-12-05 15:12:12
On Tue, 5 Dec 2006, Seth Goodman wrote:

The second way for box67.com to get the desired functionality is to
provide SMTP AUTH services over port 587.  If the network at Raytheon
permits this, users inside the network connects with the box67.com MSA
over port 587 and gives it their login credentials in order to submit a
message.  Since mail submissions over port 587 require login, most
networks don't bother to block outgoing connections, but they might.
For cases where the foreign network allows this, it is preferable
because you don't have to list the foreign MTA's in your SPF record and
there is no risk of the foreign domain forging your return-path.

Yes, this is the only sane way to do what he wants.  Since these are
fixed email clients (which wasn't clear on my first answer), they
can be configured to do so.

It seems pointless today, but remember this was published in 1982 when
many of us had secretaries who typed up and distributed our memos.
There are other uses for this field, even though MUA's generally don't
expose them for use.  You are allowed to have a list of people claim
authorship in the From: address, and if so, the single party who sends
the message puts their address in Sender:.  Some mailing lists use
Sender: to show they are sending the current message, which was authored
by the party in the From: address.  When there is a Sender: address,
Outlook displays it as:  From: <sender address> on behalf of <from
address>.  There are also Resent-From: and Resent-Sender: headers,
though most users and MUA's are unaware of them.

Also, pymilter copies MAIL FROM to Sender as needed to make what Outlook
displays helpful in detecting phishing, without having to display all
headers.

-- 
              Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to http://v2.listbox.com/member/?list_id=735