On 08/23/2015 08:13 AM, Stephen J. Turnbull wrote:
> 
> Executive summary: if you're sure you've got all your hosts covered by
> the SPF record, use -all as Jim P says.


There is an issue with -all. SPF does not work with .forwards or other
relaying of that nature. If you can be certain that every recipient's
final MX is the one your server sends to, then -all is OK, but you can't.

The scenario is your list member is [email protected]. [email protected]
is set to forward all mail to [email protected]. Yahoo receives the
list post with envelope from [email protected] (or
[email protected] if VERPed) for
[email protected] from the server at example.com. The SPF for
your.list.server doesn't allow example.com as a relay, so SPF fails at
yahoo.com.

-- 
Mark Sapiro <[email protected]>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list [email protected]
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to