scott at kitterman
Jul 27, 2007, 6:24 AM
Post #2 of 3
(787 views)
Permalink
|
On Friday 27 July 2007 07:14, Charles A. Landemaine wrote:
> Thanks to Scott for his help in the Gmail configuration. I think I sorted
> it out I'm trying to understand SPF. I'm reading this paper:
> http://www.openspf.org/SPF_Record_Syntax
>
> What I don't understand is that at some point it says "-" means
> "Fail", the when it fails "The SPF record has designated the host as
> NOT being allowed to send". Ok. But then:
>
> "v=spf1 ip4:192.168.0.1/16 -all"
> "Allow any IP address between 192.168.0.1 and 192.168.255.255".
>
> As there is "-all", shouldn't it fail?
No. If the source IP of the address is withing that IP range, the ip4
mechanism matches and the -all is never processed. The "all" mechanism is
the default when no mechanism matches. So, for your sample record any IP
address between 192.168.0.1 and 192.168.255.255 is authorized and all others
are not.
Scott K
-------------------------------------------
-----------------------------------------------------------------------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&id_secret=25815743-217565
Powered by Listbox: http://www.listbox.com
|
