On 08/23/2017 08:26 PM, John Levine wrote: > Only if you want your mail to mysteriously disappear. There are a lot > of perfectly legitimate ways to send and route mail that SPF cannot > describe. Unless your name is Paypal or you are otherwise a giant > phish target, -all is not want you want.
Yes, there are a number of ways that SPF's -all can bite you if you're not aware of them and / or don't account for them. I've been using SPF's -all for about 10 years and have had extremely few problems because of it. I've had FAR (multiple orders of magnitude) more problems with other people breaking their SPF record and not able to send me email because my SPF filter honored what they published. Despite the potential gotchas, I still believe that enabling SPF's -all from the get go is a LOT easier than trying to retroactively enable it after things are already in place. -- Grant. . . . unix || die _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
