On Wed, 24 Aug 2005, Fred Viles wrote:
> On 24 Aug 2005 at 9:01, Marilyn Davis wrote about
> "Re: [exim] Anti Phishing Trick":
>
> |...
> | If the Federation is the forwarding MTA, then any phish they forward
> | to my machine is not my fault.
>
> The point you still seem to be missing is with *legitimate* mail they
> forward (at the request of the recipient), rejection of which *is*
> your fault.
Again, I'm saying that you *can't* reject forwarded mail on the basis
of SPF record. But neither are you responsible for its arrival in the
inbox if it is phish.
The only problem mentioned that makes sense to me is that, if someone
has their important mail from their bank going to 2 addresses and one
gets forwarded to the other, then you can't tell that it was forwarded
and you will reject it as phish.
But, then, again, that someone should accept the responsibility for
keeping their email straight with the bank so I can't feel too guilty
about the missed mail.
Thanks for the discussion.
Marilyn
>
> - Fred
>
>
>
>
>
>
--
