SRS has a couple of problems, which make me assume that it's not going 
to really get anywhere:

1) If you implement SPF, then you have to rely on the fact that 
forwarding services of your recipients implemented SRS.
2) The from address gets mocked up. Making it not very "user readable".
3) The from address SRS created would change from time to time (it 
includes a time stamp). So the same person sending me two mails, has two 
different addresses.
4) The from address SRS created is meant to expire (otherwise abuse via 
such an address would be possible). So replying to that e-mail you 
received last week, won't work. Sure, you know all about SRS, so you're 
able to find out what the real address of the sender was. But will your 
mom be able to do so?

Basically it comes down to this:
If you implement SPF, then you could assume that e-mails you send from 
servers that are "trusted" according to SPF and that don't get 
forwarded, are more likely to get through the spam filters.
But your SPF record is best to also allow mails from other servers 
simply because you never know if your recipient might be using forwarding.

Sincerely,
Bart Mortelmans



CLEMENT Francis wrote:
> This 'forwarding' issue is resolved with 'SRS' (Sender Rewriting =
> Scheme)
> that complements SPF.
> In fact SPF allways need SRS :)
> (except on final smtp servers that you are sure it's not possible to =
> forward
> to foreign servers that are not controlled by you)
> The couple SPF + SRS can be called 'new' SPF, and many products =
> implementing
> SPF implement SRS too.
>
> Some info on SRS here : http://www.openspf.org/SRS
>
> Francis
>
>
>   
>> -----Message d'origine-----
>> De : [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] la part de Ivo Smits
>> Envoy=E9 : vendredi 27 avril 2007 01:17
>> =C0 : xmail@xmailserver.org
>> Objet : [xmail] Re: Dynamic DNS / Don't use SPF
>>
>>
>> Someone pointed out that SPF may cause other problems. A=20
>> recent example:
>>
>> I ([EMAIL PROTECTED]) tried to email some abuse department,=20
>> [EMAIL PROTECTED]
>> This address was redirected to [EMAIL PROTECTED]
>> My server delivers my email to MX1.example.com, which=20
>> redirects the email.
>> MX1.isp.com sees a mail from the IP of MX1.example.com, with=20
>> the address=20
>> [EMAIL PROTECTED],
>> it then checks the SPF record for UFO-Net.nl and notices that=20
>> MX1.example.com is not allowed to send this mail.
>>
>> So probably everyone will end up with a SPF record that tells=20
>> the other=20
>> mailserver to just accept email from everywhere (even GMail uses this=20
>> record!).
>> The only use of SPF may be to skip some resource-expensive checks like =
>>     
>
>   
>> spamassassin.
>>
>> Ivo
>>
>>     
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
>   

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to