On 31 Aug 2017, at 8:15, Benoit Panizzon wrote: > Hi Stefano > >> From my data I'd say that those MX are MX for PARKED domains at >> namecheap (I logged more than 1000 domains using that MX and randomly >> checking some of them, they are parked domains). >> >> I guess it can be safe to drop incoming email from a parked domain. > > Strange, todays active domain is: apparty.bid > > apparty.bid descriptive text "v=spf1 ip4: -all" > > We do check SPF, so why did this email pass? Is 'ip4:' equivalent to > the whole IPv4 space?
I believe they misspelled "v=spf1 -all" Best regards -lem
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
