Justin Mason wrote: > According to the SPF people, we shouldn't > be using -all on a domain that may possible emit mail. So I changed > the record...
That can't be right. Try out the wizard at http://spf.pobox.com/wizard.html?mydomain=spamassassin.org It gives you two choices in the last question "Do the above lines describe all the hosts that send mail from spamassassin.org". If the answer is yes, you get ~all in the record, if it is no you get ?all. If you can list all sending domains, sending ip addresses, and ISP mail servers that are allowed to send mail from a spamassassin.org address, then you can use ~all and we can use from spamassassin.org in the SPF test for a failed HELO. If you can't list all of them in the record, we are forced to use ?all and we need a different domain to use for the test. I don't want to make the change to enable the test for Windows until we have the test fixed to not fail. -- sidney
signature.asc
Description: OpenPGP digital signature
