On Tue 24/Nov/2020 13:52:43 +0100 Brotman, Alex wrote:
I had one spam message that had 13 parts. It included both "_mta-sts" and "mta-sts" in there, as well as "mail" nine times. The last two parts were the org domain.
If the message happened to authenticate, negative reputation is better added to that org domain rather than to .com or to some random mta-sts.mail.something.
IOW, if we need the OD anyway for alignment, there's no point in discovery DMARC records by tree walk.
Best Ale -- _______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
