On 2020-12-21 10:56 a.m., Eric Tykwinski via mailop wrote:
Just a heads up:
v=spf1 include:spf2.bluehost.com include:_spf.qualtrics.com
include:_spf.google.com include:_spf.salesforce.com
include:sparkpostmail.com include:spf.mailjet.com -all
evaluating...
Results - PermError SPF Permanent Error: Too many DNS lookups
In general, it is a very disappointing trend overall, in how
administrators use SPF.. whether you are a fan or not, it only is useful
if it is at least used sanely..
Just saw another well known company, a commonly 'phished' domain, in the
hosting industry.. that just published a SPF record with ..
40.107.0.0/16 40.92.0.0/15 104.47.0.0/17 52.100.0.0/14
Now, I do not think that their company will be sending email from all
those IP(s), and this allows any 'phisher' that can get an IP address in
those ranges a free pass..
When every one starts just throwing the door wide open, SPF as a whole
runs a risk of loosing support.
IMHO the total number of IP(s) that are allowed SHOULD have some sane
'cap', or it isn't really valid as a SPF..
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
