Re: SPF/TXT records

2009-06-22 Thread David Ford
There is no perfect solution which either a) is technically correct for everyone, or b) is religiously correct for everyone. Rather, try to learn how to best implement a given solution correctly such as SPF if it has value to your organization. There will always be someone foaming at the mout

RE: SPF/TXT records

2009-06-22 Thread Jeff Lightner
Friday, June 19, 2009 5:25 PM To: bind-users@lists.isc.org Subject: Re: SPF/TXT records My comments below will be to all in general, not to anyone specific and no offence intended to anyone... RE: Advogato: Who? RE: Circlied: Who ? Ok enough of the sarcasm :) Is someone here ser

Re: SPF/TXT records

2009-06-20 Thread Joseph S D Yao
Swilting, a mail blocker tells me that you are sending something called mailbomb.tar.bz2 as an attachment, to this mailing list [which, sensibly, strips it]. -- /*\ ** ** Joe Yao j...@tux.org - Josep

Re: SPF/TXT records

2009-06-20 Thread swilting
its simple the spam on open serveur that provided on big ISP my exe win32 look the code look the config file its all the best simple Le samedi 20 juin 2009 à 11:59 +0200, swilting a écrit : > Le samedi 20 juin 2009 à 07:53 +0200, swilting a écrit : > > a powerfull user of domankeys and DKIM > > >

Re: SPF/TXT records

2009-06-20 Thread swilting
Le samedi 20 juin 2009 à 07:53 +0200, swilting a écrit : > a powerfull user of domankeys and DKIM > > that is it ? > > another domain fakessh.eu is up for DK DKIM > > the full administrator smtp.wanadoo.fr is a spammeur > > > > script consists of a while loop surrounding a telnet session >

Re: SPF/TXT records

2009-06-19 Thread swilting
a powerfull user of domankeys and DKIM that is it ? another domain fakessh.eu is up for DK DKIM the full administrator smtp.wanadoo.fr is a spammeur script consists of a while loop surrounding a telnet session Le vendredi 19 juin 2009 à 22:38 -0400, Joseph S D Yao a écrit : > On Sat, Jun 20

Re: SPF/TXT records

2009-06-19 Thread Joseph S D Yao
On Sat, Jun 20, 2009 at 07:24:41AM +1000, Noel Butler wrote: ... > as the ones given). Seriously if you want to show why not, reference a > reputable site with reputable commentators. ... Circleid has reputable commentators. I'm not saying that they all are, only that there exist some; I have

Re: SPF/TXT records

2009-06-19 Thread Noel Butler
My comments below will be to all in general, not to anyone specific and no offence intended to anyone... > RE: Advogato: Who? > RE: Circlied: Who ? Ok enough of the sarcasm :) Is someone here seriously trying to use those sites as a "reason" to not do something, might as well reference

Re: SPF/TXT records

2009-06-19 Thread Fr34k
bind-users@lists.isc.org Sent: Friday, June 19, 2009 12:41:50 PM Subject: RE: SPF/TXT records Or moreover not to bother with SPF at all as suggested in these documents?: Why you shouldn't jump on the SPF bandwagon: http://www.advogato.org/article/816.html How spammers get around

RE: SPF/TXT records

2009-06-19 Thread Jeff Lightner
bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mike Bernhardt Sent: Friday, June 19, 2009 12:37 PM To: 'Matus UHLAR - fantomas'; bind-users@lists.isc.org Subject: RE: SPF/TXT records So is the general recommendation in this group to NOT implement

RE: SPF/TXT records

2009-06-19 Thread Mike Bernhardt
y, June 19, 2009 12:31 AM To: bind-users@lists.isc.org Subject: Re: SPF/TXT records On 18.06.09 16:22, Jeffrey Collyer wrote: > M$ has their own take on SPF called Sender ID, which uses a very similar > record - > > "v=spf2.0" rather than "v=spf1" > > so b

Re: SPF/TXT records

2009-06-19 Thread Matus UHLAR - fantomas
On 18.06.09 16:22, Jeffrey Collyer wrote: > M$ has their own take on SPF called Sender ID, which uses a very similar > record - > > "v=spf2.0" rather than "v=spf1" > > so be sure to read up on them both before publishing records for one or > the other. It has downfalls so I recommend not even

Re: SPF/TXT records

2009-06-18 Thread Michael Milligan
Jeffrey Collyer wrote: > M$ has their own take on SPF called Sender ID, which uses a very similar > record - > > "v=spf2.0" rather than "v=spf1" To be clear, it's "spf2.0/" plus one of "mfrom", "pra", or "mfrom,pra", e.g., "spf2.0/mfrom" which is essentially the same as regular SPF. > > so be s

Re: SPF/TXT records

2009-06-18 Thread Jeffrey Collyer
M$ has their own take on SPF called Sender ID, which uses a very similar record - "v=spf2.0" rather than "v=spf1" so be sure to read up on them both before publishing records for one or the other. http://www.openspf.org/SPF_vs_Sender_ID Hotmail in particular is picky about what it rejects a

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 03:06:14PM -0400, Jeff Lightner wrote: > I'm assuming you mean it would be rejected if you didn't have an SPF > record for the company mail server in addition to the record for the > home consultancy? In my example, you for some reason don't have control over that DNS reco

RE: SPF/TXT records

2009-06-18 Thread Jeff Lightner
cause it wasn't high priority. -Original Message- From: Joseph S D Yao [mailto:j...@tux.org] Sent: Thursday, June 18, 2009 12:43 PM To: Jeff Lightner Cc: bind-users@lists.isc.org Subject: Re: SPF/TXT records On Thu, Jun 18, 2009 at 12:22:26PM -0400, Jeff Lightner wrote: > We don&#

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 12:22:26PM -0400, Jeff Lightner wrote: > We don't allow "all servers" to send email at all. They have to > specifically be configured to send and relay to the Exchange server > which itself must be configured to allow them. > > The domain, waterinvoice.com is not in genera

RE: SPF/TXT records

2009-06-18 Thread Jeff Lightner
ursday, June 18, 2009 12:16 PM To: bind-users@lists.isc.org Subject: Re: SPF/TXT records It is all too easy for mail marked as from one of your domains to be forwarded out the other mail server, if your internal mail server lets every server inside forward mail (e.g., error messages) to it. Unless

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
It is all too easy for mail marked as from one of your domains to be forwarded out the other mail server, if your internal mail server lets every server inside forward mail (e.g., error messages) to it. Unless you personally set up mail on all servers, in which case you are a bottleneck. I have a

Re: SPF/TXT records

2009-06-18 Thread Matus UHLAR - fantomas
On 17.06.09 11:19, Jeff Lightner wrote: > Right my relay might want it but if so that would be in my internal > view. The Exchange and Sendmail servers only allow relay from specific > locations and neither is using SPF to authenticate so far as I know. > > My question was more related to external

Re: SPF/TXT records

2009-06-18 Thread Michael Milligan
This is a bit OT, but... You specify in an SPF (TXT) record your outbound MTAs, the ones that everybody outside of your organization will see your mail sourced from. If it goes through a third-party outsourced provider, you put the provider's MTAs in your record (best via an include:). If your m

RE: SPF/TXT records

2009-06-17 Thread Jeff Lightner
org Subject: Re: SPF/TXT records On 17.06.09 10:46, Jeff Lightner wrote: > When one sets SPF/TXT record is it for the relay server/IP that sent the > email to the internet or the originating one? maybe even both. If the outgoing mail relay checks for SPF, and you don't use SMTP authentica

Re: SPF/TXT records

2009-06-17 Thread Matus UHLAR - fantomas
On 17.06.09 10:46, Jeff Lightner wrote: > When one sets SPF/TXT record is it for the relay server/IP that sent the > email to the internet or the originating one? maybe even both. If the outgoing mail relay checks for SPF, and you don't use SMTP authentication (in which case relays may not check f