David Woodhouse <dwmw2@???>:
> If the record is _just_ "-all" then that's fair enough -- and that can
> be done with a dnsdb lookup. But unless I misread your ACL, you'll alco
> be rejecting mail based on even the idiotic SPF records which list a few
> 'genuine' hosts followed by -all, with the fundamental misunderstanding
> of SMTP that that entails.
You were doing so well right up to that last paragraph :-)
--
Peter Bowyer
Email: peter@???
Follow me on Twitter: twitter.com/peeebeee