On Wed, 26 May 2004 15:54:55 +0100 David Woodhouse <dwmw2@???> wrote:
> True :) But to a large extent we can manage to reject mail from those
> particular nutters with much less hassle:
> deny condition=if {match {${lookup dnsdb{txt=$sender_address_domain}{$value}{}}}{v=spf1.*-all}} {1}}
> message=Only stupid people have SPF records containing '-all'
this is a little much.
i have a domain, digest.net, whose sole purpose is to host mailing lists.
there are no users, only electronic mailing lists. no mail with the domain
@digest.net is legitimate unless it originates from 192.94.170.0/24
why is -all not appropriate here?
richard
--
Richard Welty rwelty@???
Averill Park Networking 518-573-7592
Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security
