RE: Testing SRS

[David Woodhouse]
>Wrong. It's not about whether _you_ do any forwarding. It's about
>whether any of the millions of addresses to which your users may send
>email are doing forwarding.
> 
>>I am using virtusertable redirects, but isn't SRS supposed 
>>to deal with this?
> 
>If SRS is implemented at every forwarding site to which you ever send
>email from the domain for which you publish a '-all' record, then yes.

The SPF Publishing wizard (http://spf.pobox.com/wizard.html) uses -all
in most situations, because most sysadmins using the wizard answer "yes"
to the question "Do the above lines describe all the hosts that send
mail from yourdomain.com?"

I used this wizard when I first published SPF records, and answered yes
to that question. I thought only of mail ORIGINATING from my domain, as
most people would.

If publishing '-all' is as dangerous as you say, shouldn't someone
change the SPF Publishing Wizard to highlight the forwarding problem and
recommend '~all' instead, at least for the time being?

As many others have noted, I have not seen any bounced mail as a result
of publishing '-all', but this is probably because most SPF-aware
recipients are using SPF checks only as part of a larger spam scoring
system, and are not rejecting based on SPF checks yet.

Regards,
	Ryan