Re: Harvest netblocks of good MTAs from SPF for whitelisting from greylisting

Stuart D Gathman <[email protected]> Tue, 12 Feb 2013 21:41:15 -0500 (EST)
Newsgroups gmane.mail.spam.spf.discuss
Message-ID <[email protected]>
On Feb 12, Scott Kitterman transmitted in part:

> This seems way harder than just whitelisting mail from the domains on
> your list that pass SPF.  You are assuming that all mail from those
> hosts is as trustworthy as the mail from your list of good domains. I
> don't think that is a safe assumption.

He is only whitelisting mail from the domains on his list - but by
statically compiling the IPs like libspf2 does, except that he is 
coarsening the resolution of the set to netblocks.  I was suggesting
that he might not want to do the netblocks thing when starting with
SPF records for the "good" domains.