-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Julian Mehnle wrote:
> Julian Mehnle wrote:
> > Frank Ellermann wrote:
> > > I think [Google] reject FAIL, [...]
> > >
> > > See also <http://www.openspf.org/Frank_Ellermann/Google>, if it's
> > > generally interesting I could move it to an "ordinary" openspf
> > > page.
> >
> > Before we consider that, how can we be sure that the rejection
> > demonstrated on that page is actually due to an SPF Fail?
>
> Here's an indication to the contrary from 2007-12-03:
> [...]
And here's the result of me sending an SPF-spoofed message to a GMail
account I created ad-hoc:
| Received: by 10.150.202.10 with SMTP id z10cs28334ybf;
| Sat, 22 Dec 2007 18:18:36 -0800 (PST)
| Received: by 10.65.73.16 with SMTP id a16mr4520780qbl.36.1198376315518;
| Sat, 22 Dec 2007 18:18:35 -0800 (PST)
| Return-Path: <julian@mehnle.net>
| Received: from earbone.schlitt.net (openspf.org [76.79.20.188])
| by mx.google.com with ESMTP id h7si3376335roe.17.2007.12.22.18.17.59;
| Sat, 22 Dec 2007 18:18:35 -0800 (PST)
| Received-SPF: fail (google.com: domain of julian@mehnle.net does not designate 76.79.20.188 as permitted sender) client-ip=76.79.20.188;
| Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of julian@mehnle.net does not designate 76.79.20.188 as permitted sender) smtp.mail=julian@mehnle.net
I.e., no SMTP-time rejection.
On the other hand, I tried sending a message from a dynamically allocated
IP address and got the following SMTP response after DATA:
| 550-5.7.1 [62.245.209.57] The IP you're using to send email is not authorized
| 550-5.7.1 to send email directly to our servers. Please use
| 550 5.7.1 the SMTP relay at your service provider instead. [...]
So it seems more likely that the latter response is specific to rejections
due to dynamically allocated IP addresses.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHbcsywL7PKlBZWjsRAjKVAKD8PTuqimkn+P1kTvDPSJz42t7DRgCgrsBA
Y50L0PyEv911JXkjWJWuxQg=
=9zm1
-----END PGP SIGNATURE-----
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=1311532&id_secret=78917168-4846eb
Powered by Listbox: http://www.listbox.com
Hash: SHA1
Julian Mehnle wrote:
> Julian Mehnle wrote:
> > Frank Ellermann wrote:
> > > I think [Google] reject FAIL, [...]
> > >
> > > See also <http://www.openspf.org/Frank_Ellermann/Google>, if it's
> > > generally interesting I could move it to an "ordinary" openspf
> > > page.
> >
> > Before we consider that, how can we be sure that the rejection
> > demonstrated on that page is actually due to an SPF Fail?
>
> Here's an indication to the contrary from 2007-12-03:
> [...]
And here's the result of me sending an SPF-spoofed message to a GMail
account I created ad-hoc:
| Received: by 10.150.202.10 with SMTP id z10cs28334ybf;
| Sat, 22 Dec 2007 18:18:36 -0800 (PST)
| Received: by 10.65.73.16 with SMTP id a16mr4520780qbl.36.1198376315518;
| Sat, 22 Dec 2007 18:18:35 -0800 (PST)
| Return-Path: <julian@mehnle.net>
| Received: from earbone.schlitt.net (openspf.org [76.79.20.188])
| by mx.google.com with ESMTP id h7si3376335roe.17.2007.12.22.18.17.59;
| Sat, 22 Dec 2007 18:18:35 -0800 (PST)
| Received-SPF: fail (google.com: domain of julian@mehnle.net does not designate 76.79.20.188 as permitted sender) client-ip=76.79.20.188;
| Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of julian@mehnle.net does not designate 76.79.20.188 as permitted sender) smtp.mail=julian@mehnle.net
I.e., no SMTP-time rejection.
On the other hand, I tried sending a message from a dynamically allocated
IP address and got the following SMTP response after DATA:
| 550-5.7.1 [62.245.209.57] The IP you're using to send email is not authorized
| 550-5.7.1 to send email directly to our servers. Please use
| 550 5.7.1 the SMTP relay at your service provider instead. [...]
So it seems more likely that the latter response is specific to rejections
due to dynamically allocated IP addresses.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHbcsywL7PKlBZWjsRAjKVAKD8PTuqimkn+P1kTvDPSJz42t7DRgCgrsBA
Y50L0PyEv911JXkjWJWuxQg=
=9zm1
-----END PGP SIGNATURE-----
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/735/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/735/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=1311532&id_secret=78917168-4846eb
Powered by Listbox: http://www.listbox.com