Re: SRS/SPF Help Needed

"Stuart D. Gathman" <[email protected]> Mon, 10 Jul 2006 17:17:17 -0400 (EDT)
Newsgroups gmane.mail.spam.srs.general
Message-ID <[email protected]>
On Mon, 10 Jul 2006, David Sowder wrote:

> > Publicdomain.com would look up the SPF for mx1.finaldestination.com.
> > SRS at publicdomain.com would then unwrap the To: address to
> > [email protected], and forward it back to sending.com (sending.com
> > would look up SPF for the given EHLO name (e.g. mx1.publicdomain.com) as
> > there is no From: address.)
> >
> > Right?
> 
> 
> I believe you have it right.  The only part I'm slightly fuzzy on is the SRS
> part, but I believe it's correct.

Since finaldestination.com is the one that configured publicdomain.com to
do the forwarding, a much simpler solution that SRS is to simply not check SPF
for mail coming from publicdomain.com.  There is no point in check SPF for
that domain anyway, because unless publicdomain.com itself checks SPF
before forwarding, anyone can forge mail by forwarding through them -
with or without SRS at the forwarder.

-- 
	      Stuart D. Gathman <[email protected]>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.