Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-18 Thread Alessandro Vesely via mailop
On Wed 17/Jun/2020 21:15:57 +0200 vom513 via mailop wrote: I run my own personal mail server, Linux, usual open source bits… One of my many layers/checks for inbound is SPF. Insofar as I reject at the “front door” (SMTP connection) if SPF fails (example is a domain using “-all”). I would imag

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-18 Thread Jaroslaw Rafa via mailop
Dnia 17.06.2020 o godz. 15:31:40 John Levine via mailop pisze: > > For most of us, the only time we take "-all" seriously is if it's the > only thing in the SPF record, to state that a domain sends no mail at > all. Other than that, treat it the same as ~all or ?all because as > you have found a

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread Carl Byington via mailop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, 2020-06-17 at 16:45 -0400, Bill Cole via mailop wrote: > > This problem is part of why DMARC was developed. Very few people are > adequately confident of their understanding of DMARC and of its > reliability to make it the root cause of mail

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread Bill Cole via mailop
On 17 Jun 2020, at 15:15, vom513 via mailop wrote: My understanding for the longest time is that an SPF policy of “-all” is a strong statement and should be honored as such. A lot of people believed that a long time ago. However, those of us running systems that handle a substantial quantity

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread John Levine via mailop
In article <2e5fef36-789f-61c2-41d6-dba139fc8...@heeg.de> you write: >I'm pretty wary of SPF, especially since it just breaks mail forwarding which >some of our users like to do to >consolidate all mail in one mailbox. I know they should not do this, ... People have been forwarding mail about as

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread Hans-Martin Mosner via mailop
Am 17.06.20 um 21:15 schrieb vom513 via mailop: > I know the ultimate answer is “do what makes sense for me” - but I’d love > some feedback from folks here on what they consider best practice etc. Also > please help me with my understanding of SPF / DMARC interactions (especially > with regard

Re: [mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread John Levine via mailop
In article <3e229a32-88db-4fdb-b67a-c68d0b65e...@gmail.com> you write: >SPF. Insofar as I reject at the “front door” (SMTP connection) if SPF fails >(example is a domain using >“-all”). I would imagine this is pretty vanilla so far compared to other >folks. To be blunt, it is among hobby mail

[mailop] SPF strict / DMARC interaction / "big" provider behavior...

2020-06-17 Thread vom513 via mailop
Hello all, Apologies in advance if this is off-topic for this list. I hope it doesn’t stir too much of a hornet nest :) I run my own personal mail server, Linux, usual open source bits… One of my many layers/checks for inbound is SPF. Insofar as I reject at the “front door” (SMTP connection