On Fri, 17 Oct 2008, Alessandro Vesely wrote:
Doesn't that assume "+mx -all"? One should whitelist the IPs where replied
messages actually came from... Rather, I would whitelist the sender and just
flag the DNSBL lookup response, delaying any reaction until responding to the
RCPT command. That way it is also possible to forget DNSBL altogether for
specific recipients who don't want that filtering.
Senders change their IPs. If they have an SPF record, this is transparent.
For important senders with no SPF record, I can create a local one manually
to positively identify them.
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/735/=now
RSS Feed: https://www.listbox.com/member/archive/rss/735/
Powered by Listbox: http://www.listbox.com