spf-discuss
[Top] [All Lists]

Re: [spf-discuss] SPF w/SRS

2007-01-30 15:32:44
Ok, that makes sense to me.  However, there are a few examples in the 
documentation that talk about doing checks in the exim acl_smtp_data acl 
for the 'From:' header.  I think someone needs to do some documentation 
cleanup.

From the Mail::SPF::Query documentation in the examples/exim-acl :

spf_from_acl:

    # Check header From:

    warn     set acl_m8  = ${address:$h_from:}
    deny     !acl        = spf_check
    warn     message     = Received-SPF: $acl_m8 ($acl_m7)
    accept

In the Exim documentation in the doc/experimental-spec.txt :

You can now run SPF checks in incoming SMTP by using the "spf"
ACL condition  in either  the MAIL,  RCPT or  DATA ACLs.




Please respond to spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

To:     spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
cc:      (bcc: Dan Mitton/YD/RWDOE)
Subject:        Re: [spf-discuss] SPF w/SRS
LSN: Not Relevant
User Filed as: Not a Record


On Tue, 30 Jan 2007 Dan_Mitton(_at_)Notes(_dot_)YMP(_dot_)GOV wrote:

Ok, so does this also imply that the 'MAIL FROM' should be checked by 
SPF,
but that the 'From:' header should NOT be checked by SPF?

Yes. That is exactly what SPF RFC4408 says.

SPF is a protocol focusing on validating SMTP session input data.
The data that MUA (normal mail client end-users use) processes is
an email content data (composed of email header with multiple fields
such as "From:" and a body which maybe composed of multiple MIME parts).
MUA can only found about SMTP data if MTA added this info in - in
case of MAIL FROM, last such data should be added to the very top
of the header data in "Return-Path" field.

-- 
William Leibzon
Elan Networks
william(_at_)elan(_dot_)net

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to http://v2.listbox.com/member/?list_id=735


-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to http://v2.listbox.com/member/?list_id=735
<Prev in Thread] Current Thread [Next in Thread>