On 30/07/2013 18:21, Jan Henkins wrote:
You also have "~all" which is a soft-fail
(handy for
testing, but pointless for production), and "?all" which is neutral
(utterly pointless IMHO).
If you think that's bad, then consider that there are a significantly
non-zero number of domains that actually explicitly use +all, which as
far as I'm concerned is tantamount to declaring 'all spammers in the
world may use my domain freely'.
http://spf-all.com/stats.html
In my mail setup I normally allow domains that pass SPF to skip
greylisting, but I have an explicit check for +all which treats it as
neutral and falls through to greylisting.
Interestingly, I'm starting to see greylisting become less effective as
an anti-spam technique. Traditionally greylisting works by temporarily
rejecting mail on the first delivery attempt on the assumption that
genuine MTAs conform to the specs and will attempt to resend a short
while later, while spambots will simply give up and move on to the next
target.
A few years ago nearly all of the small amount of spam I got was from
hosts which passed SPF (presumably either through compromised systems or
through loose SPF settings). Nowadays most of my spam is SPF neutral,
which in my mail setup gets greylisted. This means that these spams are
getting through greylisting, so there are now some spam networks out
there which have clued on to this.
--
Phil