SPF_Fail score too low?

[Steve Freegard]

Rick Chadderdon wrote:
> Steve Freegard wrote:
>> Rick Chadderdon wrote:
>>> I don't use SPF on all of my domains  because some of them have users 
>>> that will have issues with it.
>>
>> SPF is still useful here to you here if you supply a PASS result for 
>> everything that you know about, then return NEUTRAL for everything else.
>>
>> This doesn't impact the users in any way but can help people who might 
>> want to whitelist your domain.
> 
> I suppose that's worth consideration, especially if my mailserver's 
> address ever ends up in an RBL.  But...  I really can't see most admins 
> being willing (or able) to set up a whitelist that only allows a 
> whitelisted domain if it passed SPF.  Still, it could be useful in that 
> case, I agree.

This is precisely how much of the whitelisting is done in SpamAssassin, 
see Mail::SpamAssassin::Plugin::SPF and have a look at the 
whitelist_from_spf directive.

Kind regards,
Steve.