Nathan.Roberts at weastec
Aug 2, 2004, 12:14 PM
Post #8 of 15
(1659 views)
Permalink
|
Koen,
I'm starting to get a grasp on this I think. Just a few more silly
questions. I looked at the site you listed. About the ip4 mechanism. It
states "If no prefix-length is given, /32 is assumed." Lets say I only want
1 ip address, maybe 2. What would I specify?
Also, where do these rules come from? Do they only relate to SPF? The
comment under ip6 sort of makes me nervous "Could someone with IPv6
experience please provide some input?". Does the author not even
understand it? Thanks!
Nathan Roberts
Systems Analyst
Weastec Inc.
(937)840-1190
Koen Martens
<spf[at]metro.cx>
Sent by: To
owner-spf-help[at]v2 spf-help[at]v2.listbox.com
.listbox.com cc
Subject
08/02/2004 02:44 Re: [spf-help] Newbie questions
PM
Please respond to
spf-help[at]v2.listb
ox.com
Hi Nathan,
You are not the first one to find the wizard a bit confusing :)
http://dev.spf.pobox.com/mechanisms.html provides an explanation of the
different mechanisms. If you want to say 'stuff from 68.23.93.3 is me'
then "v=spf1 ip4:68.23.93.3 ?all" is correct indeed (note that it's ip4,
not ip).
On a sidenote:
If you want to check spf records too, you better dig into your
secondary mx setup, since forgers are keen on secondary mx'es to dump
their loads since they assume these are not as well protected as are the
primaries.
Koen
On Mon, Aug 02, 2004 at 02:33:31PM -0400, Nathan.Roberts[at]weastec.com wrote:
> Koen,
> I do have only '1 outgoing mail server'. It is behind a firewall.
> In fact, everything of mine should be behind this firewall to send mail.
> So you are saying I can use "v=spf1 ip:68.23.93.3 ?all". What about all
> the other questions, does this setting overide those? Also, what does
all
> this mean? Is there a document on this? Sorry, I'm not usually this
> stupid but why can't I just say stuff from 68.23.93.3 is me, otherwise
its
> forged? Thanks!
>
> Nathan Roberts
>
>
>
>
> Koen Martens
> <spf[at]metro.cx>
> Sent by:
To
> owner-spf-help[at]v2 spf-help[at]v2.listbox.com
> .listbox.com
cc
>
>
Subject
> 08/02/2004 01:42 Re: [spf-help] Newbie questions
> PM
>
>
> Please respond to
> spf-help[at]v2.listb
> ox.com
>
>
>
>
>
>
> Hi,
>
> The wizard is great, but it helps if you know what is going on behind
> it. If you only have 1 mail server (i assume you mean '1 outgoing mail
> server'), specifying that single server in your spf record is all you
> have to do. If the mail server is on an ip that is the same as your
> domain, a simple "v=spf1 a -all" would suffice (or ~all / ?all if you
> want to play it conservative). If it is not, you could use "v=spf1
> ip4:1.2.3.4 -all" where 1.2.3.4 is the ip of your outgoing mail server
> of course.
>
> Hope this helps,
>
> Koen
>
> On Mon, Aug 02, 2004 at 01:24:06PM -0400, Nathan.Roberts[at]weastec.com
wrote:
> > I'm trying to get a SPF record setup for my company. I'm having some
> > difficulties though. I'm stuck on the second question!!
> >
>
> >
>
> > This wizard found 4 names for weastec.com's MX servers.
>
> > MX servers receive mail for weastec.com.
>
> > Do they also send mail from weastec.com?
>
> >
>
> > We only have 1 mail server here. What are these other names/servers?
>
> > Should I be concerned with this? Thanks!
>
> >
>
> >
> >
> >
> >
> > Nathan Roberts
> > Systems Analyst
> > Weastec Inc.
> >
> > -------
> > Archives at http://archives.listbox.com/spf-help/current/
> > Donate! http://spf.pobox.com/donations.html
> > To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> > please go to
> http://v2.listbox.com/member/?listname=spf-help[at]v2.listbox.com
>
> --
> K.F.J. Martens, Sonologic, http://www.sonologic.nl/
> Networking, embedded systems, unix expertise, artificial intelligence.
> Public PGP key: http://www.metro.cx/pubkey-gmc.asc
> Wondering about the funny attachment your mail program
> can't read? Visit http://www.openpgp.org/
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> please go to
http://v2.listbox.com/member/?listname=spf-help[at]v2.listbox.com
>
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your
subscription,
> please go to
http://v2.listbox.com/member/?listname=spf-help[at]v2.listbox.com
--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/
-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help[at]v2.listbox.com
-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help[at]v2.listbox.com
|
