[Mimedefang] Re: What to do about bounced forgeries?

[Kevin A. McGrail]

The main problem with implementing SPF at my company is being caused by
internet service providers blocking port 25 outbound.

Obviously I think this ISP policy has great benefits but even though we run
SMTP on an alternate port, many people simple call their ISP and get told to
send outbound off the ISP's server.

We simply don't have the resources to call and educate potentially hundreds
or thousands of people and I consider our company pretty proactive.  If we
can't implement this any time soon, I question the ability of other
company's to implement this system.

Because SPF is DNS related, the possibility of caching comes into play.  And
we can't extend the POP3 before SMTP stuff because they will be relaying off
an unknown ISP SMTP server.  Sigh.

Finally, while I understand SPF to be a relatively simple DNS based system,
I also specialize in handling DNS issues. Unfortunately, because of the fact
that when I have to interface with some company's to get DNS changes made, I
rarely can get an MX record updated properly let alone major entries to a
zone done properly.

Sigh,
KAM


----- Original Message ----- 
From: "Kenneth Porter" <shiva at sewingwitch.com>
To: <mimedefang at lists.roaringpenguin.com>
Sent: Sunday, December 21, 2003 11:24 PM
Subject: Re: [Mimedefang] Re: What to do about bounced forgeries?


> --On Sunday, December 21, 2003 6:26 PM -0800 Jeremy Mates
<jmates at sial.org>
> wrote:
>
> > Support the development and deployment of SMTP+SPF
>
> Lest you think this is a lot of work, there's a nice web form at the site
> that builds the required DNS TXT record for you. Just fill in your domain
> name and check the boxes for your mail server policy and it writes the
> record. Then paste it into your DNS file.
>
> SPF also works with those of us who don't have control of our reverse
zones
> for outbound direct-to-MX mail; the record goes in the domain's forward
> zone, not it's reverse.
>
> <http://spf.pobox.com/wizard.html>
> _______________________________________________
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>