Re: Re: Patches from Robert Millan

On Saturday 14 July 2007 15:32, Julian Mehnle wrote:
> Mail::SPF's approach is more formal in that it does not automatically
> switch over to checking the HELO identity in case of the MAIL FROM identity
> being empty.  Rather, there is only one identity argument (not "mfrom" +
> "helo"), and Mail::SPF requires you to check for yourself whether MAIL FROM
> is empty and then pass the HELO identity to make a "postmaster@<HELO>"
> check.  

The RFC specifies that the MAIL FROM identity MUST be checked, and that the 
MAIL FROM identity is defined as postmaster@(HELO-id) when the return path is 
null (<>). It'd seem convenient to me if libspf2 automatically did what was 
required.

> (Note in particular that RFC 4408 does not require implementations 
> to automate this.  I think it's cleaner if they don't.)

Can you point out precisely where it doesn't require that? :-)

Seriously though, it talks about "implementations" and "SPF clients" that MUST 
or SHOULD do things in specified ways, but that doesn't say anything about 
what should be done in the library and what should be done in the 
applications.

However, I don't quite understand the difference between a HELO id check and 
MAIL FROM check with a null return path. In the first case, which is 
optional, check_host() is passed the HELO identity, which IIUC is just the 
HELO string and looks like "foo.example.com" (in the ideal case), and 
check_host() should prepend "postmaster@" to it. In the second case the 
check_host() caller must itself prepend "postmaster@" to the HELO id. In this 
light it seems appropriate for the application to follow the 
Mail::SPF::Request instructions.

> See <http://search.cpan.org/dist/Mail-SPF/lib/Mail/SPF/Request.pm#mfrom>
> and
> <http://search.cpan.org/dist/Mail-SPF/lib/Mail/SPF/Request.pm#identity>.

-- 
Magnus Holmgren        [email protected]
                       (No Cc of list mail needed, thanks)

-------------------------------------------
-----------------------------------------------------------------------
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?member_id=6959932&id_secret=22163096-2b8bb5
Powered by Listbox: http://www.listbox.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBGmSVAk7mRNn1h4+YRAr5OAKCuK6I6EFwsIEtJZ33f3R54+3fc+gCfY+qY
EdAvLSpOm5qDmgfROUYeNRo=
=s0XI
-----END PGP SIGNATURE-----