[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: DEPLOY: Permitting '-all' to be used immediately representsaflag day.
You do not understand the problem. The difficulty with
forwarding occurs at the receiving sites, not the sending
sites that publish Sender-ID records.
There is no such thing as a "receiving site" here. Or rather, the term is
used rather misguidedly to denote a site who forwards. If I send mail to a
'receiving' site, which forwards that mail, then that site is simply another
hop in the sender chain.
If you use -all you must never send email to an
alias-fowarding address -- but you have no way
of knowing which addresses these are.
This 'problem' is hardly new; it is covered in section "Does SPF break email
forwarding?" in the SPF FAQ, at:
The answer is given there, too. Worth quoting is this one:
If you don't have procmail, the .forward could instead just say
"|/usr/sbin/sendmail -oi -f nobody@xxxxxxxxxxxxxxxxxxxxxxx foo@xxxxxxx"
Professional forwarders should implement SRS. It does not suffice for them
to be SPF compliant on the receiving end, yet to omit implementing the
necessary rewriting scheme (or use SUBMITTER, once it comes into fashion) on
the sending part of the equation.
System Administrator Asarian-host.org
"If you were supposed to understand it,
we wouldn't call it code." - FedEx