On Monday 29 January 2007 15:01, Matt Kettler wrote: > Mike Jackson wrote: > > Shouldn't mail be sent through the MX for a domain? > > Not if the domain is of any decent size.. Using different servers for > outbound vs inbound mail is a very common load balancing tactic for > large sites. > > Which is why SPF was created in the first place, because you can't > assume that mail is sent by the MX.
So, it is well established that mail from a domain doesn't have to be sent from the MX for the domain. But the converse should be true, shouldn't it? I.e. an MX for a domain is normally a legitimate deliverer of mail from that domain (if it delivers any outbound mail at all). Would a whitelist_from_mx option perhaps be worthwile? -- Magnus Holmgren [EMAIL PROTECTED] (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans
pgpG1mv8qOGRQ.pgp
Description: PGP signature