SPF question

[Lennart Sorensen]

On Wed, Oct 31, 2007 at 03:15:19PM -0400, Madison Kelly wrote:
> All of the valid topics you both bring up aside (and thank you for 
> them!), but reason for using SPF came about because a *massive* flood of 
> bounced messages started coming in to my 'admin at ...' email claiming that 
> user's of my domain were sending out messages (from IPs in eastern 
> countries). I needed a way to tell these other mail servers that these 
> messages where, in fact, not coming from me or my users.
> 
> Now I realize the flaw in saying "Only validate email coming from this 
> range of IPs" because of legit foreign users, but at the times it looked 
> like a great solutions and did indeed bring the flood down to the usual 
> trickle.
> 
> So back to my original question; is there a way, shy of creating a big 
> list of IPs/ISPs my users may route their SMTP mail through, to tell 
> other MTAs what is legit from my users?
> 
> I'm coming to the sad realization that, no, probably not. *sigh*

Nope, I can't think of a way either.  Simply having your users
authenticate and connect back to you somehow to send their mail would
work around that, but is more complicated to configure the client for.

As long as morons keep buying stuff from spammers, we just can't win. :(

--
Len Sorensen
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists