nanog mailing list archives

Re: DNS question, null MX records *summary of on list and off list replies*


From: Phil Vandry <vandry () TZoNE ORG>
Date: Tue, 15 Dec 2009 22:14:10 -0500

On Tue, 15 Dec 2009 11:51:29 -0600, Eric J Esslinger wrote:
B. Set spf -all, for those who bother to check that to stop inbound
mail from your domain.

You might as well also add a DKIM ADSP policy with "dkim=discardable".
Similar to your SPF policy, it announces that no unsigned mail (or
no mail at all in your case) should come from this domain. But DKIM
does not suffer from the problems SPF causes with email forwarding
(see recent NANOG thread on that topic).

-Phil


Current thread: