Spammers Skirt IP Authentication Attempts

Wed Sep 8 11:02:53 UTC 2004

On Wed, Sep 08, 2004 at 11:54:32AM +0100, Paul Jakma wrote:
> 
> Except that, SPF records are as easy to setup for a spammer, as for 
> you and I. If the above is a spammer, then SPF for foobar.com will 
> list randomgibberish.comcast.net as an authorised sender.
> 
> SPF will absolutely not have any effect on spam.

But if instead of foobar.com, it is vix.com or citibank.com, then their
SPF records will not point at randomgibberish.comcast.net as an
authorized sender. That means that if I do get a mail purporting to be
from citi from randomgibberish, I can junk it without hesitation.

/vijay