Re: SPF and HELO, was Re: SPF PASS

John L wrote:
>>> Yeah.  Too bad that among SPF's many flaws is that it completely
>>> confuses the HELO domain and the MAIL FROM domain 
>>
>> No it does not.  It checks each independently.  See my previous post 
>> to your question.
> 
> 
> Could you show me the SPF records I would use to indicate that 
> mta.example,com is valid as an EHLO but not as a bounce address domain 
> while example.com is a valid bounce address domain but not an EHLO.  If 
> it'll help, assume they both have an A record of 12.34.56.78.

You cannot with SPFv1 (based on your assumption).  You missed the point: 
  It doesn't matter, primarily the HELO is only checked if the MAIL FROM 
fails.

A pass from the HELO or MAIL FROM results in SPF PASS status.


> 
>>> (and on a bad day,
>>> the domains in From:, Sender:, Resent-From:, and Resent-Sender:.)
>>
>>
>> SPF never does that, please do not confuse PRA with SPF.
> 
> 
> In real life, lots of people use SPF records for PRA, 
Name one ISP MSP or ISP.  Small time single domain self maintained 
organizational mail servers don't really count in the volume of things, 
but just for the hell of it, try naming a few of those.

> and there was a 
> loud debate before coming to a consensus that the alternative of 
> throwing everything away and starting over was unworkable.  I sure wish 
> the SPF crowd had a better institutional memory.

I fail to see how the crowds memory has changed.  Currently the SPF 
council is writing the official "what is SPFv1" so then it can be 
carried forth to "what should be in the successor version".

> 
> R's,
> John
> 

-- 
Terry Fielder
[email protected]
Associate Director Software Development and Deployment
Great Gulf Homes / Ashton Woods Homes
Fax: (416) 441-9085