Re: private relay ... could i use srs to avoid spf fail?

On Fri, 2006-12-01 at 08:51 -0600, wayne wrote:
> In <[email protected]> "Dick St.Peters" <[email protected]> writes:
> 
> > If you use SRS to reject bogus DSNs, you will also reject return
> > receipts from Outlook (and probably Outlook Express) users.
> 
> Are you saying that Outlook doesn't send DSNs to the 2821.MAILFROM, as
> RFC3834 says to?  If so, what does it send it to instead?
> 
> 
> > Rejecting non-SRS DSNs also rejects responses from some
> > autoresponders.  While many people might think of this as a Good
> > Thing, I have users who consider out-of-office notifications
> > valuable.
> 
> Again, it sounds like those systems are broken by not sending to the
> 2821.MAILFROM.

Thankfully, a significant number of systems which are broken enough to
send to the wrong address will _also_ send _from_ the wrong address, and
thus their brokenness cancels itself out :)

> > Rejecting non-SRS DSNs naively also rejects postmaster-verification
> > callbacks, causing some sites to reject your mail.
> 
> Again, those systems sound broken.  If a call-back verification is
> checking the 2821.MAILFROM, it should give use a NULL MAIL FROM on the
> check (and a RCPT TO do the original 2821.MAILFROM).  If the call-back
> verification is using something like the 2822.From: header, it should
> use something like <[email protected]> as the
> 2821.MAILFROM.

Postfix gets this wrong -- it does callouts to the MAILFROM address but
with a non-empty MAILFROM of its own. I had to accept mail from
postmaster@.* to the SRS addresses. Other than that, I haven't really
had any problem (apart from the ses list, as I just said).


Btw, you don't actually _need_ to submit mail through the official
servers to use SRS on all mail -- my laptop will do the SRS for itself
on outgoing mail, and can send via any route.

-- 
dwmw2