-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Jul 06, 2004 at 11:16:53AM -0700, Sean Berry wrote:

>This SPF, Sender Policy Framework... how would I use that?

The main site for all things SPF is http://spf.pobox.com/

For my domain, toehold.com, I have an SPF record in DNS which says which
IPs are allowed to send mail from toehold.com.  If you receive an email
from toehold.com, you can look up the SPF record and compare it to the IP
that's trying to hand you the mail.  If SPF says it's not allowed to send
toehold.com mail, you know the address is forged.

If you're doing hosting for your 200 clients, you may be able to give them
SPF records yourself, though it may still be a pain.

Checking SPF on your end depends on your setup.  I use SpamAssassin 3,
which has SPF checking built-in.  I can look at its spam report to see how
the SPF check went and act accordingly.
- -- 
Kyle Hasselbacher                  Facts are stubborn,
[EMAIL PROTECTED]             but statistics are more pliable.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA6vDf10sofiqUxIQRAjBcAJwM/NwVT3jHSVuMvqT7Hkx6/7jWTQCgtnxb
9nbaqpcHB8lNW6bxc8j6RxE=
=ECGJ
-----END PGP SIGNATURE-----
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to