Hi !!
> That's probably better to actually _do_ callout when spf=pass, because
> you are "sure" that one the authorized IPs for the domain has sent the
> mail, so you have rights to verify the address exists.
yes, but then the tested address is likely to exist so the callout will
almost always succeed. If you do the callout when spf != pass you will
honour batv (if used by the remote domain) and/or check that at least
the remote address exists.
--
Best regards ...
----------------------------------------------------------------
David Saez Padros http://www.ols.es
On-Line Services 2000 S.L. e-mail david@???
Pintor Vayreda 1 telf +34 902 50 29 75
08184 Palau-Solita i Plegamans movil +34 670 35 27 53
----------------------------------------------------------------
