[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SPF or the like for *some* *subdomains* of .debian.org ?



On Sunday 23 October 2005 03:10, Mark Brown <broonie@sirena.org.uk> wrote:
> On Sat, Oct 22, 2005 at 12:16:35PM -0200, Henrique de Moraes Holschuh wrote:
> > You know, here SPF could help us. There is no reason at all for people to
> > complain that they cannot send email from bugs.debian.org, db.debian.org
> > and some other special *subdomains* of debian.org.  This does not impact
> > in any way on the @debian.org emails.
>
> ...and hope that nobody wants forward e-mail from those domains using a
> virtual table or equivalent to somewhere doing SPF checks.

If you forward such mail you should know something about the site that you are 
forwarding it to.  If the recipient site is doing SPF checks then your 
forwarding system needs to do the appropriate SPF mangling or the recipient 
site needs to add the forwarder as an exception to the SPF policy.  In either 
case it shouldn't be difficult to do.

The only situation in which SPF is a problem is when someone wants to setup 
forwarding but has no control over anti-spam measures on the destination host 
or the forwarding mechanism.  Is it common that users will have such a lack 
of control when using systems that implement SPF?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page



Reply to: