On Wed, 11 Jul 2012, Martin Gregorie wrote:
On Wed, 2012-07-11 at 21:34 +0200, Josef Karliak wrote:
within a few days we've spams from domains that has "+all" in the
TXT spf record.
how are you proposing to improve on what SA currently does?
Adding a point for a domain that says "email from all possible IP
addresses is valid" may be justifiable. Spammers can use SPF and might
publish a +all to cover their spambot network.
I don't know whether this explains what Josef is seeing, but it's a
possibility.
Josef, do you have any feel for whether you're getting _ham_ from those
domains as well?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Sheep have only two speeds: graze and stampede. -- LTC Grossman
-----------------------------------------------------------------------
5 days until the 67th anniversary of the dawn of the Atomic Age
