> On May 21, 2017, at 8:33 AM, ComKal Networks <ad...@comkal.com.au> wrote: > > Hi, > > I use "-all" for my primary domain simply because we > don't use mobiles, outgrew them 17 years ago. All email > from my primary will only ever originate from my server. > My primary domain doesn't forward received emails to > anywhere else on receipt, and never will.
One thing to also consider is that some of the places checking SPF screw it up. There’s a recent case of a very large ISP breaking their SPF checker. Instead of using the IP that connected to the MX as the source IP, the ISP used an internal handoff IP address as the source IP. Every single message sent to this IP failed SPF until they fixed it. This was widely known due to DMARC reporting, and there was absolutely nothing any sender could do to fix it. Luckily for most of us this ISP doesn’t reject solely on SPF failure. However, there was risk of emails with DMARC p=reject and no DKIM signature to be rejected due to a failed SPF record. This took the ISP in question quite a long time to fix - weeks, if not months. But it would have made perfect sense if the ISP in question stopped using SPF as a delivery criteria while their code was broken. laura -- Having an Email Crisis? 800 823-9674 Laura Atkins Word to the Wise la...@wordtothewise.com (650) 437-0741 Email Delivery Blog: http://wordtothewise.com/blog
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
