On Thu, 6 Sep 2007, Marc Chametzky wrote:
Not only are the spammers using +all, but the more clever ones are using
several ip4 mechanisms with very broad CIDR specifications so that when
you put them all together, they end up being ip4:0.0.0.0/0.
+all is fine. The domain gets blacklisted by reputation after 20 spams,
and gets rejected in MAIL FROM from then on. Spammers that identify
themselves (even with a short lived domain) are not a big problem.
You could even call them "honest" spammers.
The forgeries are the problem. It is a lot more dangerous to reject mail
claiming to be from "bigcustomer.com" just because it looks spammy to your
software.
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com