On Tue, 2004-10-19 at 16:25 +1300, Craig Whitmore wrote:
Working through http://spf.pobox.com/wizard.html seems to suggest that "v=spf1 mx -all" means that only the MXs for the hypothetical 'domain.co.nz' are allowed to send email - otherwise it would be "v=spf1 -all" wouldn't it?
Yes.. your right :-) (I was wrong) "v=spf1 -all" = I will not send any email. "v=spf1 mx -all" = I will only send from mx.domain...
Domain.co.nz was only an example :-) (not a real one with wrong records)
even so.. there are some domains in NZ (and outside NZ) who have incorrect sfp records.
Whew! I have a _heap_ of domains here that have "mx -all" or "a mx -all" for their SPF and these were all originally generated from the spf.pobox.com web based helper. We too have found SPF somewhat useful as further grist for SpamAssassin - not trustable for a variety of reasons, but something that is very susceptible to the sorts of heuristics that SpamAssassin does quite well. Regards, Andrew McMillan. ------------------------------------------------------------------------- Andrew @ Catalyst .Net .NZ Ltd, PO Box 11-053, Manners St, Wellington WEB: http://catalyst.net.nz/ PHYS: Level 2, 150-154 Willis St DDI: +64(4)803-2201 MOB: +64(272)DEBIAN OFFICE: +64(4)499-2267 Expect the worst, it's the least you can do. -------------------------------------------------------------------------