Comments on: Using SPF Records To Build Objects http://aconaway.com/2009/10/16/using-spf-records-to-build-objects/ It's possible that someone somewhere needs to see this. Fri, 10 Feb 2012 15:03:12 -0700 hourly 1 http://wordpress.org/?v=3.1.4 By: TAS http://aconaway.com/2009/10/16/using-spf-records-to-build-objects/comment-page-1/#comment-20687 TAS Mon, 02 Nov 2009 10:19:28 +0000 http://aconaway.com/?p=370#comment-20687 If it were for a single/or a small team of engineers say 10 Eng team members wanted this,we realized the best way was to allow small number of ip addresses based on DNS query and add them to User's local host DNS entry.Most of those addresses are always active.i.e incase , Google/WebServer Company is doing some maintenance and they might take few servers out but for the large part,it worked great ! Active Directory Group Object Policy came handy for this as update was applied in bulk. If it were for a single/or a small team of engineers say 10 Eng team members wanted this,we realized the best way was to allow small number of ip addresses based on DNS query and add them to User’s local host DNS entry.Most of those addresses are always active.i.e incase , Google/WebServer Company is doing some maintenance and they might take few servers out but for the large part,it worked great ! Active Directory Group Object Policy came handy for this as update was applied in bulk.

]]> By: welbow http://aconaway.com/2009/10/16/using-spf-records-to-build-objects/comment-page-1/#comment-20603 welbow Fri, 16 Oct 2009 22:21:36 +0000 http://aconaway.com/?p=370#comment-20603 SPF doesn't prevent spam so much as forgeries. Just so happens, a lot of spam is also forgery :) But it also breaks email forwarding (jac@aconaway.com forwards to jac@comcast.net [heh, had to throw that one in just cuz I know you love comcast]). A lot of mail admins are using DKIM in favor of SPF. DKIM works in that signed mail is treated as trusted; rather than the ambiguity of SPF (did they really not mean to put that netblock in there or did they just forget?) SPF doesn’t prevent spam so much as forgeries. Just so happens, a lot of spam is also forgery :) But it also breaks email forwarding (jac@aconaway.com forwards to jac@comcast.net [heh, had to throw that one in just cuz I know you love comcast]).

A lot of mail admins are using DKIM in favor of SPF. DKIM works in that signed mail is treated as trusted; rather than the ambiguity of SPF (did they really not mean to put that netblock in there or did they just forget?)

]]>