IETF Logo Mail Archive

Re: [Asrg] SPF's helo identity as a reporting target

Chris Lewis <clewis+ietf@mustelids.ca> Sun, 13 May 2012 19:56 UTC

Return-Path: <clewis+ietf@mustelids.ca>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8163521F8549 for <asrg@ietfa.amsl.com>; Sun, 13 May 2012 12:56:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.13
X-Spam-Level:
X-Spam-Status: No, score=0.13 tagged_above=-999 required=5 tests=[AWL=-0.311, BAYES_05=-1.11, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VLMVtqL+aVoV for <asrg@ietfa.amsl.com>; Sun, 13 May 2012 12:56:51 -0700 (PDT)
Received: from mail.mustelids.ca (unknown [174.35.130.2]) by ietfa.amsl.com (Postfix) with ESMTP id B000821F8564 for <asrg@irtf.org>; Sun, 13 May 2012 12:56:50 -0700 (PDT)
Received: from [192.168.0.8] (otter.mustelids.ca [192.168.0.8]) (authenticated bits=0) by mail.mustelids.ca (8.14.4/8.14.4/Debian-2ubuntu2) with ESMTP id q4DJunMF031170 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NOT) for <asrg@irtf.org>; Sun, 13 May 2012 15:56:49 -0400
X-DKIM: Sendmail DKIM Filter v2.8.3 mail.mustelids.ca q4DJunMF031170
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mustelids.ca; s=default.private; t=1336939010; bh=kvAr7PzyUdvJNcY/B+jL+CQxe9mObvn+b0Isrf9SXDc=; h=Message-ID:Date:From:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Content-Transfer-Encoding; b=KPAzBN8PfwHEWTcihAOpk9J0S4iXnmipa6H1RzJ1oXuQaWUsiHjvkwCVIiRxKFRAa 1Ap6RAO4iENLuqvrXo+C087DU3177XTp8DS+3xSPoi+rzMNhc3Y/6vprM+R/qIrJ0q FMNKrsbhXP1ZXjUx30t3pjm7B8hgpE5QJjwtYcko=
Message-ID: <4FB01201.9030209@mustelids.ca>
Date: Sun, 13 May 2012 15:56:49 -0400
From: Chris Lewis <clewis+ietf@mustelids.ca>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.23) Gecko/20090812 Thunderbird/2.0.0.23 Mnenhy/0.7.6.666
MIME-Version: 1.0
To: asrg@irtf.org
References: <4FA8FBCA.3050904@tana.it> <4FAE187B.9030902@tana.it> <4FAEA20F.8090302@mustelids.ca> <4FAF85D0.8050305@tana.it> <4FAFFDB6.4020405@mustelids.ca> <4FB00224.7010500@tana.it>
In-Reply-To: <4FB00224.7010500@tana.it>
X-Enigmail-Version: 1.5pre
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [Asrg] SPF's helo identity as a reporting target
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sun, 13 May 2012 19:56:51 -0000

On 12-05-13 02:49 PM, Alessandro Vesely wrote:
> On Sun 13/May/2012 20:44:58 +0200 Chris Lewis wrote:
> 
>> On 12-05-13 05:58 AM, Alessandro Vesely wrote:
>>
>>> No, wait.  Didn't I say it has to get an SPF "pass" to get usable?
>>> I must have considered it implied... my bad.
>>
>> It doesn't help.
>>
>> spammerdomain.com IN MX 0  wmail.tana.it.
>> spammerdomain.com IN TXT "v=spf1 ip4:0/0 -all"

Whoops, I meant:

_smtp.spammerdomain.com IN MX 0 wmail.tana.it

> 
> That's not quite how helo authentication works.  When they say "helo
> wmail.tana.it" the server looks up wmail.tana.it.

No.  The spammer says "helo spammerdomain.com".  Postmaster sends
complaint to abuse@_smtp.spammerdomain.com.

Where does that go?

v2.8.7 | Report a Bug | By Email