Author: Marc Sherman Date: To: exim-users Subject: Re: [exim] Looking for Mail::SPF (2.002) Exim acl example
Dan_Mitton@??? wrote: >
> I'd also like some options - 'deny' or 'drop'? If a message fails SPF
> checking at the HELO or MAIL level, why should I not just 'drop' the
> connection rather then 'deny' the message?
If it's a legitimate mail server that happens to have misconfigured SPF,
dropping the connection will result in a temporary failure in the
sending server. The message will get queued up for a resend, and you've
effectively just DOS'd yourself. Denying it is a permanent failure, and
a legitimate but misconfigured sender will not bother you again.
