[130465] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

do you use SPF TXT RRs? (RFC4408)

daemon@ATHENA.MIT.EDU (Greg Whynott)
Mon Oct 4 12:48:10 2010

From: Greg Whynott <Greg.Whynott@oicr.on.ca>
To: "nanog@nanog.org list" <nanog@nanog.org>
Date: Mon, 4 Oct 2010 12:47:52 -0400
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


A partner had a security audit done on their site.  The report said they we=
re at risk of a DoS due to the fact they didn't have a SPF record.  =20

I commented to his team that the SPF idea has yet to see anything near mass=
 deployment and of the millions of emails leaving our environment yearly,  =
I doubt any of them have ever been dropped due to us not having an SPF reco=
rd in our DNS.  When a client's email doesn't arrive somewhere,  we will he=
ar about it quickly,  and its investigated/reported upon.      I'm not oppo=
sed to putting one in our DNS,  and probably will now - for completeness/be=
st practice sake.. =20


how many of you are using SPF records?  Do you have an opinion on their use=
/non use of?

take care,
greg







home help back first fref pref prev next nref lref last post