[Mimedefang] Spammers - was Re: md_check_against_smtp_server and md_graphdefang_log

[Joseph Brennan]

> http://spf-all.com/

According to that page:

  ~all 	SoftFail 	The email is likely a forgery, but the domain is in 
transition.

which is not what RFC 4408 says, namely

   A "SoftFail" result should be treated as somewhere between a "Fail"
   and a "Neutral".  The domain believes the host is not authorized but
   is not willing to make that strong of a statement.

Soft fail means maybe it's authorized and maybe it's not, to my reading.


Joseph Brennan
Columbia University Information Technology