Matus UHLAR - fantomas wrote:
positive SPF results mean NOTHING - any spammer can register a domain and create SPF for it. Only the *FAILs are useful since it means someone is (probably) spoofing. Maybe NEUTRAL can indicate anything, but PASS has non-zero score only because zero score would cause it not to appear.
More precisely, a positive SPF result *by itself* is not an indicator of non-spam. It can be combined with other data, such as a whitelist of domain names, and be quite useful, as in the whitelist_spf and whitelist_auth rules.
-- Kelson Vibber SpeedGate Communications <www.speed.net>
