Re: [courier-users] breaking smtp

Gordan Bobic wrote:
> Gordon Messmer wrote:
>
>>> I'm sure there are enough essays on the
>>> internet on why SPF is broken that I don't have to summarise them here.
>> If I write an essay explaining why transparently redirecting your users'
>> connections is broken, will you stop doing it? SPF has its faults, but
>> it's not broken just because people complain about it.
>
> No, people complain about it because it is broken. That's the second
> time you got things backwards in one post.

I beg to disagree on SPF brokenness.

First, I don't think Sam would have implemented it if it was broken.
Second, after quite some time, I've only had a single incident, and
it was because my SPF configuration was not conservative enough.

I think people complain about dire policies, not about SPF. The only
relevant objection, IMHO, is that software doesn't usually check for
MAIL FROM and FROM consistency, and end users only see the latter. It
would be enough to routinely rewrite, say,

Return-Path: <courier-users-bounces@lists.sourceforge.net>
From: Alessandro Vesely <vesely@tana.it>

into

Return-Path: <courier-users-bounces@lists.sourceforge.net>
From: lists.sourceforge.net for Alessandro Vesely <vesely@tana.it>

whenever the domain parts don't match. That way end users would enjoy
SPF's lite authentication.











































-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users