On Thu, 15 Mar 2007, Seth Goodman wrote:
This is true, however, the HELO FQDN generally contains the parent
domain name, and that just might provide a way to emulate CSV and
automatically track non-SRS forwarders who publish SPF records. If
If the forwarder publishes an SPF record for their domain (not the HELO
FQDN), then there is no problem. It doesn't matter if they publish
an SPF record for HELO names, because a proper HELO FQDN matches
the connect IP anyway. The pymilter best_guess algorithm already
matches correct HELO FQDNs against the domain:
if res != 'pass' and hres == 'pass' and spf.domainmatch([q.h],q.o):
res = 'pass' # get a guessed pass for valid matching HELO
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735