Re: SPF PASS
Frank Ellermann <[email protected]> Thu, 26 May 2005 20:27:54 +0200
| Newsgroups | gmane.ietf.mxcomp |
|---|---|
| Organization | <URL:http://purl.net/xyzzy> |
| Message-ID | <[email protected]> |
Carl Hutzler wrote: > I wish there was a way to utilize the relatively large number > of SPF records in a technology like CSV. You could try the SIQ-idea: input IP and FQDN, output PASS, FAIL, or DUNNO. The SIQ-server checks CSV and if n/a SPF to create its (IP, FQDN, result, TTL) HELO-tuples. If the SIQ-server is forced to use SPF (no CSV) to create its records it could ignore all policies with the vague qualifiers ? or ~, and it could also ignore all "expensive" SPF policies, anything with mx, ptr, include could be defined as "forget it, too expensive for a simple HELO test". So you only look at +/-a +/-ip4, +/-ip6, +/-all. I'm not sure about "mx" and "exists", a dedicated SIQ-server could have enough time to evaluate these mechanisms. Bye, Frank P.S., you better add MTAMARK before CSV before restricted SPF