-----Original Message----- From: LuKreme [mailto:krem...@kreme.com] Sent: vrijdag 15 mei 2009 8:05 To: users@spamassassin.apache.org Subject: Re: whitelist_from_spf
On 14-May-2009, at 21:57, Mark wrote: >> "v=spf1 mx a:spf.orange.es ip4:213.143.52.0/24 -all" >> >> What's the CIDR there for if not to identify the valid range of IPs >> for the SPF records? >> >> Wait a minute, are they saying that their ENTIRE CLASS C is allowed >> to send mail 'from' orange.es? > > The /24 CIDR covers the 213.143.52.0-213.143.52.255 range. Why does > that strike you as so strange? :) > What orange.es is saying is that their mailservers are any machine > named spf.orange.es (all 42 of them) AND the entire (unrelated) class > C. That seems rather excessive as it specifies over 300 machines as > valid senders of orange.es mail. Hmm, that *does* seem a bit excessive. Honestly? I think they just got lazy. :) Instead of just listing all 42 mail servers individually (or with proper CIDRS), they just slapped on a quick /24 mask. 42 is a good number, according to The Hitchhiker's Guide to the Galaxy. Not for orange.es, apparently. :) - Mark
