On Thu, 14 Dec 2006, j o a r wrote:

> Marc: Since you already require that your customers modify their
> MX records to have their email sent to your servers, why not
> update / add the appropriate SPF records at the same time? That
> would prevent any problems caused by SPF checks.

Not quite.

Anyone using Marc's service or one like it (e.g. Postini) should
DISABLE any SPF checks on their MTAs that reject mail, since their MTA
is no longer the public MX for their domain.

Marc can still perform SPF checks at *his* inbound MTA, as *he* is now
their public MX. How he uses that information is up to him.

Marc? I assume you tell your customers to disable any SPF checks on
their inbound MTA once they start using your service?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Men by their constitutions are naturally divided in to two parties:
  1. Those who fear and distrust the people and wish to draw all
  powers from them into the hands of the higher classes. 2. Those who
  identify themselves with the people, have confidence in them,
  cherish and consider them as the most honest and safe, although not
  the most wise, depository of the public interests.
                                                  -- Thomas Jefferson
-----------------------------------------------------------------------
 Tomorrow: Bill of Rights day

Reply via email to