Hi List

Just wondering as I have come across this situation multiple times.

A domain includes an SPF entries which have different 'all' settings.
Which one is valid?

I would have guessed, that an 'include' should never contain the
'all' statement to make it possible for the domain owner to define this.

But for example hosted exchange services often include:

spf-a.outlook.com descriptive text "v=spf1 ip4:157.56.232.0/21 
ip4:157.56.240.0/20 ip4:207.46.198.0/25 ip4:207.46.4.128/25 ip4:157.56.24.0/25 
ip4:157.55.157.128/25 ip4:157.55.61.0/24 ip4:157.55.49.0/25 ip4:65.55.174.0/25 
ip4:65.55.126.0/25 ip4:65.55.113.64/26 ip4:65.55.94.0/25 -all"

I am aware, specifying anything other than '-all' is pretty useless,
but shouldn't the choice remain with the domain owner?

Other company publishing such an include SPF for it's customers.

_spf.synventis.com descriptive text "v=spf1 ip4:213.239.204.153 
ip4:78.46.40.142 ip4:78.46.101.176 ip4:5.9.28.36 ~all"

The customer in question specified '-all' in his TXT entry including
the above one.

So which one is valid in the end? Is the first one encountered while
parsing the line or the last one? How are includes processed? After
processing the 'main' entry, or recursively, therefore before?

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to