scott at kitterman
Aug 30, 2006, 8:21 PM
Post #3 of 4
(1577 views)
Permalink
|
On Wed, 30 Aug 2006 21:00:25 -0400 (EDT) "Stuart D. Gathman"
<stuart [at] bmsi> wrote:
>Should exceeding mx or ptr limit result in permerror, or simply
>not match? The RFC just says you MUST not use more than 10. (10.1/7)
>However, the preceding paragraph mandates PermError for other limits.
>Also, there is no way to predict *which* 10 you will get first.
>So the only consistent result is to PermError if there are more than 10.
>
>Comments?
>
>tests:
> mx-limit-fail:
> description: >-
> there MUST be a limit of no more than 10 MX looked up and checked.
> spec: 10.1/7
> helo: mail.example.com
> host: 1.2.3.5
> mailfrom: foo [at] e4
> result: permerror
> mx-limit-pass:
> description: >-
> there MUST be a limit of no more than 10 MX looked up and checked.
> spec: 10.1/7
> helo: mail.example.com
> host: 1.2.3.4
> mailfrom: foo [at] e4
> result: permerror
>zonedata:
> mail.example.com:
> - A: 1.2.3.4
> e4.example.com:
> - SPF: v=spf1 mx
> - MX: [0, mail.example.com]
> - MX: [1, mail.example.com]
> - MX: [2, mail.example.com]
> - MX: [3, mail.example.com]
> - MX: [4, mail.example.com]
> - MX: [5, mail.example.com]
> - MX: [6, mail.example.com]
> - MX: [7, mail.example.com]
> - MX: [8, mail.example.com]
> - MX: [9, mail.example.com]
> - MX: [10, e4.example.com]
> - A: 1.2.3.5
>
IIRC, my validator takes the don't match/warn approach.
Scott K
-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-devel [at] v2
|
