[SATLUG] Fwd: Undelivered Mail Returned to Sender

Brad Knowles brad at shub-internet.org
Sat Feb 10 05:52:17 CST 2007


At 12:52 AM -0600 2/10/07, Bob Tracy wrote:

>  (3) Check for SPF records: whoops!  None defined for shub-internet.org.

Nope.  SPF is inherently broken.  We've known this for years.  And I 
mean years.

You won't find any SPF records for me.

>  I suppose I could have somehow inferred that an "arbitrary" his.com
>  host is a legitimate delivery agent for shub-internet.org e-mail based
>  on the MX records, but that's stretching things a bit.

Uh, like that would be the default that you should assume for any 
domain that does not have SPF records.  Check RFC 4408, section 2.5.1.

You should not be insisting that all domains be SPF-compliant in 
order to send e-mail to you.  At least, not if you want to get any 
e-mail from anyone, that is.

>  So...  Could I pretty-please-with-chocolate-sauce-and-walnuts-on-top
>  ask you to publish an appropriate SPF record for your domain?

No.  Nein.  Non.  Nyet.  Not under any circumstances.  See 
<http://bradknowles.typepad.com/considered_harmful/2004/05/spf.html>.

>  Else, we'll simply have to agree to disagree about the efficacy of my
>  choice of anti-spam methods.

I've got a six-part series on the best current practice in 
spamfighting methods that will soon be published on the LOPSA.org 
website.  I'll be glad to share a copy with you in advance, if you 
will agree to disable SPF on your MTA, and share your feedback with 
me.

-- 
Brad Knowles <brad at shub-internet.org>, Consultant & Author
Co-author of SAGE Booklet #15 "Internet Postmaster: Duties and 
Responsibilities"
Founding Member and Platinum Individual Sponsor of LOPSA: 
<http://www.lopsa.org>
Papers: <http://tinyurl.com/tj6q4> LinkedIn Profile: 
<http://tinyurl.com/y8kpxu>


More information about the SATLUG mailing list