Reject or tag email signed with @mydomain.com

[Ugo Bellavance]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Julian Field wrote:
> Matt Kettler wrote:
> 
> 
>>>Julian Field wrote:
>>>
>>> 
>>>
>>>
>>>>I have seen claims that the only people who have really adopted SPF so 
>>>>far are the spammers themselves.
>>>>
>>>>   
>>>>
>>>
>>>So far both spammers and those who understand SPF have adopted it. I have, AOL
>>>has, even jiscmail.ac.uk has adopted it.. (dig txt jiscmail.ac.uk)
>>>
>>>Lots of nonspammers have SPF records in use.
>>>
>>>Those who don't understand SPF claim it's useless because they expect it to be
>>>an anti-spam technology and realize that spammers can easily create their own
>>>SPF records... But that whole argument is invalid as SPF isn't an anti-spam
>>>technology per-se.
>>>
>>>Passing SPF isn't a good indicator of nonspam. It's forgable, and we all know
>>>it. It's failing SPF that's useful, as it will eventualy force spammers and
>>>worms to stop forging their domains, making them easier to track.
>>> 
>>>
> 
> Agreed. I have users in my department who post messages claiming to be 
> from their ecs.soton.ac.uk account, using SMTP servers all over the 
> place, as we have had people using mail long before SMTP AUTH came 
> along. Getting them to all use authenticated SMTP and our SMTP servers 
> isn't really practical, especially with the emergence of networks who 
> trap all outgoing SMTP connections and divert them to their own servers.
> 
> The result is that we can't publish a useful SPF record. At least I 
> don't think we can.
> Is there a way of publishing an SPF record that says nothing useful? :-)
> 

Actually, yes... if you use a tilde (~) instead of a dash (-), it only
generates softfails...  It is almost like saying nothing useful...

http://spf.pobox.com/mechanisms.html

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!