Re: [spf-discuss] using HELO instead of MAIL FROM with SPF

Meng Weng Wong writes:
>ouch.  if you don't pass in a meaningful sender, Mail::SPF::Query will
>use the helo domain.

BTW this seems to work very well indeed:

  2.815   0.0000   3.0571    0.000   0.92   -0.10  T_SPF_PASS
  0.063   0.4577   0.0295    0.939   0.74    0.10  T_SPF_FAIL

3% of nonspam gets SPF "pass", 0.45% of spam gets "fail" -- which isn't
bad, given how early in the stdization process it's at.

Ignore the 0.0295% -- that was an error in my own SPF setup, cough ;)

So how naughty is it to use HELO data instead of MAIL FROM for the
SPF check? ;)

--j.

>On Mon, Sep 29, 2003 at 07:31:32PM -0700, Justin Mason wrote:
>| How viable is this -- using the HELO domain instead of the MAIL FROM
>| to use in the SPF check?
>| 
>| I'm running into trouble with getting reliable MAIL FROM data from message
>| headers, unless the MTA has been modified to add it specifically (many
>| don't do this by default, including sendmail).
>| 
>| "Return-Path" in particular is proving unreliable quite often. :(
>| 
>| --j.
>| 
>| -------
>| Sender Permitted From: http://spf.pobox.com/
>| Archives at http://archives.listbox.com/spf-discuss/current/
>| To unsubscribe, change your address, or temporarily deactivate your subscription, 
>| please go to http://v2.listbox.com/member/?listname=spf-discuss <at> v2.listbox.com
>
>-------
>Sender Permitted From: http://spf.pobox.com/
>Archives at http://archives.listbox.com/spf-discuss/current/
>To unsubscribe, change your address, or temporarily deactivate your subscription, 
>please go to http://v2.listbox.com/member/?listname=spf-discuss <at> v2.listbox.com
>
>
>
>

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf