Best Current Practice for mail forwarding?
While SPF seems to be among the currently used technologies for spam protection, SRS looks rather dead. But forwarding mail breaks SPF without workarounds. So what is the best current practice?
- Completly ignore the existence of SPF
- Implement SPF but just implement forwarding “the old way”
- Inform you users that forwarding breaks SPF and they have to whitelist you mail server
- Implement SRS (but keep it a secret)
The forwarding part of SRS is rather simple, but I havn’t found any clear way to implement the actual handling of bounces. It wouldn’t be hard to hack some usage of Mail::SRS onto postfix but there doesn’t seem to be an off the shelves solution?
cstamas said,
August 29, 2007 @ 10:54 pm
No one should use SPF in my opinion. Read this:
http://homepages.tesco.net/~J.deBoynePollard/FGA/smtp-spf-is-harmful.html
One should consider DKIM instead.
Peter Makholm said,
August 30, 2007 @ 7:49 am
The de Boyne Pollard article is trying to argue for ignoring the problem. This will lead to mail lossage when I only serve as middle man. This isn’t really a viable option, even though I proposed it in my post. SPF is there and people are using it - I just need a working workarround.
Peter Makholm said,
August 30, 2007 @ 7:51 am
Pierre Habouzit answered on his blog:
cstamas said,
August 30, 2007 @ 12:41 pm
Even if you implement SRS most people will not. So mail is lost anyways.
Forwarding is still broken BTW.
Peter Makholm said,
August 30, 2007 @ 12:45 pm
I’ve never dreamt of a solution which solves the worlds problems just becaus I do 10 lines of code. Sorry if I did imply that.