[119849] in North American Network Operators' Group
Re: AT&T SMTP Admin contact?
daemon@ATHENA.MIT.EDU (Chris Owen)
Thu Dec 3 01:26:13 2009
From: Chris Owen <owenc@hubris.net>
In-Reply-To: <20145.1259812342@turing-police.cc.vt.edu>
Date: Thu, 3 Dec 2009 00:25:23 -0600
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Dec 2, 2009, at 9:52 PM, Valdis.Kletnieks@vt.edu wrote:
> It only stops forgery if the SPF record has a -all in it (as =
hubris.net does).
> However, a lot of domains (mine included) have a ~all instead.
I guess I've never really seen the point of publishing a SPF record if =
it ends in ~all. What are people supposed to do with that info?
Spamassassin assigns it a score of 0.6 but that is low enough it really =
doesn't have much since it doesn't assign any negative points for =
SPF_PASS.
> (And before anybody asks, yes ~all is what we want, and no you can't =
ask us
> to try -all instead, unless we're allowed to send you all the helpdesk =
calls
> about misconfigured migratory laptops".. ;)
I certainly understand that you may not be able to lock down your =
domain. We don't even try for customers for instance. However, if =
you can't, I guess I don't really see what good publishing a SPF record =
is if you tell people not to enforce it.
Chris
=
-------------------------------------------------------------------------
Chris Owen - Garden City (620) 275-1900 - Lottery (noun):
President - Wichita (316) 858-3000 - A stupidity tax
Hubris Communications Inc www.hubris.net
=
-------------------------------------------------------------------------
