On 08/31/2013 03:27 PM, Scott Kitterman wrote: > On Saturday, August 31, 2013 13:01:45 Raman Gupta wrote: >> The mail from domain name in the body of the message differs from the >> HELO/server hostname. But again, the HELO/server hostname is a valid >> SPF sender, based on an SPF "a" directive. > >> But DMARC imposes an additional requirement for identity alignment before it >> will use the SPF result.
But this would imply that my mail server should be configured to send "HELO mydomain.com" instead of "HELO mail.mydomain.com" where "mail" is the hostname of the mail server. The default value for HELO/EHLO in Postfix is $myhostname, not $mydomain, and I believe most other mail servers send hostname as well. It seems to me the DMARC spec should take into account that, for empty Return-Path's, the HELO/EHLO may be (and probably will be) a fully qualified hostname, not a domain, and adjust the rules for SPF identity alignment matching accordingly. Regards, Raman _______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)