At 01:49 15/07/2009 Wednesday, Stuart D. Gathman wrote:
On Tue, 14 Jul 2009, alan wrote:
I posted an example of intended use of HELO mechanism separately.
actually it could ish
v=spf1 a:{h4r}.smtp.example.com -all
would directly equate to your example
ie pass where yours passes fail where yours fails
No, it doesn't validate the HELO name.
yes it does {for your example}
it only passes if the connecting ip
matches the ip of the lookup of the A of
the first segment of the helo name appended to smtp.example.com
ie xx.smtp.example.com so if they claim to be xx.yyy.zzz.aa from any ip other
than the ip of xx.smtp.example.com they fail
thus helo only validates for xx.smtp.example.com and correct ip
{there is no need to validate helo if the end result will be a fail for other
reasons {wrong helo name/domain}}
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/735/=now
RSS Feed: https://www.listbox.com/member/archive/rss/735/
Powered by Listbox: http://www.listbox.com