Re: [Hampshire] SPF Best Practice

Top Page

Reply to this message
Author: Martin A. Brooks
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] SPF Best Practice
On Wed, February 3, 2010 11:43 am, Daniel Pope wrote:
> Do any mailserver admins have any advice about SPF?


It's not totally useless.

People frequently confuse SPF for some kind of anti-spam magic bullet.
Spamming outfits were the most enthusiastic uptakers of SPF; for quite
some time having valid SPF records was, if anything, a not unreasonable
indication that the email in question was spam.

Mail domain owners can help by publishing SPF records which say "mail from
anything other than _this_ list of IPs, that claims to be from this
domain, can safely be thrown away, it's not us".

SPF fails the Ultimate Spam Solution checklist on many counts:

( http://craphound.com/spamsolutions.txt )

The first, most obvious, one being:

"Requires immediate total cooperation from everybody at once"


antibodyMX does not use SPF records _at all_ as part of the filtering
process.