RE: SPF PASS (was: "If you believe that the SPF concept is fundam entally flawed, please subscribe at http://www.imc.org/ietf-mxcomp/")

> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]] On Behalf Of John Levine
> Sent: donderdag 26 mei 2005 19:12
> To: [email protected]
> Cc: [email protected]
> Subject: Re: SPF PASS (was: "If you believe that the SPF
> concept is fundam entally flawed, please subscribe at
> http://www.imc.org/ietf-mxcomp/")
>
>
>
> The domain names in my EHLOs is completely disjoint from the set in my
> MAIL FROM and mail headers. How is SPF going to handle that?

Typically, HELO/EHLO is only used in the special case of MAIL FROM: <>, so
to have the SPF client check against postmaster@HELO. Since there is no
MAIL FROM identity to protect in case of an empty envelope-from, it would
suffice to just publish this simple SPF record (BIND style) for your
completely disjoint HELO/EHLO name:

completelydisjoint.mydomain.com.          TXT "v=spf1 a -all"

That will ensure, that in the case of a DSN, your own mailer is always
authorized (and no one else!). That easy.

- Mark 
 
        System Administrator Asarian-host.org
 
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx