http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5684
------- Additional Comments From [EMAIL PROTECTED] 2007-10-23 13:38 ------- Matt, you and Theo are correct in that this is easily worked around. I was asked to work up something to catch this subversion of spf's intent, and this is what I came up with. At the time, about 3 weeks ago, Gareth was getting a lot of spam from domains with "+all" records. The intent was not to compensate for reckless negative scoring for of spf pass but to use the "+all" record as a clear indication that the domain owner intended to spam from that domain (using any machine). In the first few days of testing, I was astounded at the number of domains it found. Since then, the flow of I'd LOVE to see SPF.pm create a pseudo header containing the spf record (and sender-id record), but that was way beyond my nascent abilities in Perl; so, I didn't even attempt it. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
