nanog mailing list archives

Re: Spammers Skirt IP Authentication Attempts


From: vijay gill <vgill () vijaygill com>
Date: Wed, 8 Sep 2004 11:02:53 +0000


On Wed, Sep 08, 2004 at 11:54:32AM +0100, Paul Jakma wrote:

Except that, SPF records are as easy to setup for a spammer, as for 
you and I. If the above is a spammer, then SPF for foobar.com will 
list randomgibberish.comcast.net as an authorised sender.

SPF will absolutely not have any effect on spam.

But if instead of foobar.com, it is vix.com or citibank.com, then their
SPF records will not point at randomgibberish.comcast.net as an
authorized sender. That means that if I do get a mail purporting to be
from citi from randomgibberish, I can junk it without hesitation.

/vijay


Current thread: