Re: Re: private relay ... could i use srs to avoid spf fail?

On Fri, 2006-12-01 at 10:39 -0500, John A. Martin wrote:
> 
>     David> Postfix gets this wrong -- it does callouts to the MAILFROM
>     David> address but with a non-empty MAILFROM of its own.
> 
> Postfix gets it right by providing a configuration option.  Try
> 
>         postconf -e "address_verify_sender = <>"
> 
> One might argue about the default value but it is the responsibility
> of the administrator of the MTA to select the appropriate options.
> That is why there are options.

Admins are stupid beasts and are prone to shooting themselves in the
foot. SPF is a wonderful example of that :)

I think Exim has it "right", because although you can configure the
reverse-path used for _recipient_ callouts, you _cannot_ do sender
callouts with anything but the (correct) MAIL FROM:<>. Thus, even the
dimmest of admins doesn't get to make that particular mistake.

-- 
dwmw2