On Wed, 2004-05-26 at 13:23 +0100, Tim Jackson wrote:
> Hi David, on Wed, 26 May 2004 13:18:15 +0100 you wrote:
>
> > These nutters can claim whatever they like -- but what I'm suggesting to
> > Tom is that he shouldn't encourage _recipients_ to pay any attention to
> > them.
>
> OTOH, if everyone starts implementing Tom's suggestion, then it's the
> "nutters" who lose out as they'll find they won't be able to send mail,
> and it might help them all to realise why SPF (at least v1) is such a bad
> idea. So there might be a silver lining there :)
True :) But to a large extent we can manage to reject mail from those
particular nutters with much less hassle:
deny condition=if {match {${lookup dnsdb{txt=$sender_address_domain}{$value}{}}}{v=spf1.*-all}} {1}}
message=Only stupid people have SPF records containing '-all'
--
dwmw2