spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Using SPF op=helo for HELO Authorization

2007-01-29 16:49:54
At 06:10 PM 1/29/2007 -0500, you wrote:

On Mon, 29 Jan 2007, David MacQuigg wrote:

> Are you seeing substantial difference between say aol.com and
> comcast.net?  Can you quantify that difference?

Reputation accrue to domain + qualifier.  You can't just talk about
aol.com.  aol.com:SPF, for instance, has a high reputation.

ID aol.com:SPF reputation: 75.470863,23.933064

        75 on a scale of -100..100 for reputation
        23 on a scale of 0..100 for confidence

aol.com:neutral, on the other hand, has a very low reputation:

ID aol.com:neutral reputation: -76.159416,99.997415

That is actually the lowest possible score with the current exponential
weighting.  There has never been a non-spam from aol.com:neutral.

I haven't had any comcast.net connections with any valid id (PTR, HELO,
or SPF), in the last 2 years, so they don't have any reputation - since those
connections all get rejected at MAIL FROM. I got 220 comcast.net connection in the last 24 hours, all looking like this (with random addresses and localpart):

2007Jan29 17:43:41 [1879] connect from c-71-235-138-211.hsd1.ct.comcast.net at ('71.235.138.211', 1485) EXTERNAL DYN
2007Jan29 17:43:41 [1879] hello from c-71-235-138-211.hsd1.ct.comcast.net
2007Jan29 17:43:41 [1879] mail from <yyejiakc(_at_)comcast(_dot_)net> ()
2007Jan29 17:43:41 [1879] REJECT: no PTR, HELO or SPF

(Dynamic PTR doesn't count as valid id.)

Presumably, if someone actually wanted to email me from comcast, the
official SMTP servers would at least have a valid HELO, and I would
get the mail.

This confirms what I am seeing, huge differences in reputation between different domains.

For domains that pass our HELO check, I would expect their reputation to correlate very well with the "authenticated" segment of your scores (e.g. aol.com:SPF). Do you intend to make these ratings available to the public? It would be very nice if they were available with a DNS query.

-- Dave

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?list_id=735

<Prev in Thread] Current Thread [Next in Thread>