Mailing List Archive

Bill Walton wrote on 7/29/2008 9:53:11 AM:

> I receive email with headers like these often:
>
>> Return-Path: <bwalton@kpmg.com>

> Question: If Postini is checking SPF, shouldn't they block these
> messages as forgeries?

Kpmg.com doesn't have an SPF record.

-----
SPF FAQ: http://www.openspf.org/FAQ
Common mistakes: http://www.openspf.org/FAQ/Common_mistakes

- Steve Yates
- ITS, Inc.
- Out of my way! I smell chocolate!

~ Taglines by Taglinator - www.srtware.com ~


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

At 08:11 AM 7/29/2008, you wrote:
> > I receive email with headers like these often:
> >
> >> Return-Path: <bwalton@kpmg.com>
>
> > Question: If Postini is checking SPF, shouldn't they block these
> > messages as forgeries?
>
> Kpmg.com doesn't have an SPF record.

OK - so it's the Return-Path that's checked, not the From, even
though all three mail clients I use show the message as coming from
bwalton@rawbits.com?


--
Bill Walton bwalton@rawbits.com (831)338-0479 home
PO Box 850 (408)721-4346 bus
Boulder Creek, CA 95006-0850 (831)345-7135 cell


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

> OK - so it's the Return-Path that's checked, not the From

Yes.

http://www.openspf.org/FAQ/Envelope_from_scope


-----
SPF FAQ: http://www.openspf.org/FAQ
Common mistakes: http://www.openspf.org/FAQ/Common_mistakes

- Steve Yates
- ITS, Inc.
- Sci-Fi Survival Tip: Kids love dinosaurs; unfortunately dinosaurs
love kids too.

~ Taglines by Taglinator - www.srtware.com ~


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

Bill Walton wrote:

> OK - so it's the Return-Path that's checked, not the From

Yep.

The return-path is the critical piece wrt auto-responders
(vacation mail, bounces, etc.). It is where "backscatter"
is sent to.

> all three mail clients I use show the message as coming
> from bwalton@rawbits.com

A (slightly) different problem, it is related to phishing,
if spammers have reasons to abuse your address in phishes.

SPF is not designed to help with phishing, for that you'd
check out "DKIM ADSP" and/or "SenderID PRA". The latter
is also known as "spf2.0/pra". Folks here agree that PRA
doesn't really work as expected. Your mail client might
still show what it shows today, even if the phisher used
another address as Resent-From to get a PRA PASS of their
choice.

No silver bullets, sorry. Limited to backscatter issues
v=spf1 (PASS or FAIL) does help.

Frank



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com