How would this be implemented if a number of local ISPs are being used to
send mail for customer domains without having to keep a list of all of them?
Here's a sample including a few ISPs, but compiling a complete list seems
pointless...

"v=spf1 mx include:rr.com include:verizon.com include:aol.com ~all"

I would want anything from our MXs to pass, but I wouldn't want a failure
result if it doesn't come from our MXs.  I'm assuming the soft fail in the
generic case below is probably the best setup?

"v=spf1 mx ~all"

Darin.


----- Original Message ----- 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 24, 2004 10:42 AM
Subject: Re: [IMail Forum] OT: SPF



>As a result, I got this:
>
>domain.tld IN TXT "v=spf1 ip4:ip.add.re.ss1 ip4:ip.add.re.ss2 a:FQDN1
>a:FQDN2 mx:FQDN1 mx:FQDN2 include:OtherDomain -all"

I'll assume it is syntactically correct (all the munging makes that
impossible to determine).  In this case, anyone can send mail from
domain.tld if they are coming from:

[1] either of the 2 IPs that you supplied,
[2] an IP in the A record of FQDN1 or FQDN2
[3] an IP in the MX record of FQDN1 or FQDN2
[4] any IP that meets the requirements of the OtherDomain's SPF record.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to