Stephen Gran wrote:
And so, if it's forwarded to you via your @d.o email, it will make it through - it's coming from an at d.o address, and an @d.o machine. Only if the debian machines start doing SPF checking for @d.o addresses (in which case nobody would be able to send mail with an envelope from an @d.o address unless logged in to one of the machines), it won't help, as I understand it.
I think you may be misunderstanding a few points. One is that there is no such thing as a mail server doing SPF checking on a certain domain-- it is all domains publishing SPF or nothing. More importantly, if the original sender's domain publishes SPF, and the developer's ISP does SPF filtering, and Debian's forwarding does not employ SRS, then the forwarded email you describe will *not* make it through, even if debian.org is publishing SPF records. The reason is that when the message hits the ISP, the envelope from won't match the machine relaying the mail (*.debian.org).
-John -- http:// ift ile.org/