On Sun, 25 Jun 2006, Gino Cerullo wrote:

> > Does it do any good to complain to the ISP that accepted the  
> > original email
> > with a forged email address that uses a domain name that I administer?
> 
> Personally, nowadays I believe bouncing messages back to the alleged  
> sender

That's not what he's asking. He wants to know whether asking ISPs to
implement SPF checks (where they don't yet check SPF) will work.

> My vote would be for setting SPF for HARDFAIL as soon as is feasible,  
> after all dealing with forgery is what SPF was designed for. Sure,  
> unless those ISPs are checking against SPF it may not help but that  
> situation is getting better all the time as more and more SPF is  
> being deployed.

So how do we increase the use of SPF checks?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174    pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...every time I sit down in front of a Windows machine I feel as
  if the computer is just a place for the manufacturers to put their
  advertising.                              -- fwadling on Y! SCOX
----------------------------------------------------------------------

Reply via email to