* dman <[EMAIL PROTECTED]> [020201 09:52]: > On Fri, Feb 01, 2002 at 09:25:58AM -0700, peter green wrote: > | What is the purpose of the NO_MX_FOR_FROM test? It can check for a forged > | from, true... but wouldn't it make as much (or more) sense to test the > | envelope sender for MX, since that's where bounces might go? > | > | Also, shouldn't the check fallback to checking for an A record if an MX > | doesn't exist? For example, there isn't an MX for bluevelvet.ais.cx, but its > | A record is the appropriate mail server for that domain... > > Where is SA going to get the envelope sender from? Much of the time > it is not in the message itself.
In basically the same way it gets the From: address in check_for_from_mx(): check for Return-Path: and use that if available, return 0 if not. (qmail makes this easier by sticking the envelope sender in the SENDER env var; maybe test for this before checking for Return-Path:?) > | Unless there is some overwhelming reason not to do this, I will add > | check_for_envsender_mx() and make that and check_for_from_mx() fallback to > | an A record. > > I think all sites are supposed to have an MX record. I sure use MX records on all of my sites, but nowhere is it *required*. > Certainly the > MTAs I've encountered do fallback to an A record if there is no MX > record. For myself I've added a counter test so that ddts.net and > dyndns.org domains don't get any net score from the no MX test. Likewise, I can simply turn the test off here locally, but if The Right Thing(TM) is something else, I would be happy to contribute it to the project. /pg -- Peter Green : Architekton Internet Services, LLC : [EMAIL PROTECTED] ------------------------------------------------------------- I'd rather listen to Newton than to [Microsoft's anti-OSS Craig] Mundie. He may have been dead for almost three hundred years, but despite that he stinks up the room less. ---Linus Torvalds _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
