Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - When is SPF checked?
  FAQ FAQ  Forum Search   Register Register  Login Login

When is SPF checked?

 Post Reply Post Reply
Author
Doug Soltesz View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Doug Soltesz Quote  Post ReplyReply Direct Link To This Post Topic: When is SPF checked?
    Posted: 09 July 2004 at 12:41pm

Roberto,

Is SPF checked before the whitelist?  I have some domains on the whitelist that have been recently spoofed.  I was hoping that SPF is checked first, that way spoofed email is dropped.

Doug

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 09 July 2004 at 3:13pm
I may be mistaken but My understanding is that a white listed entry supercedes any black lists.  This means that anything white listed will go through no matter what.  However, I am not 100% on where the SPF is in the chain of events.
 
Regards,
 
Dan S.
 
Back to Top
Doug Soltesz View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Doug Soltesz Quote  Post ReplyReply Direct Link To This Post Posted: 09 July 2004 at 3:20pm

Wouldn't it make sense that SPF should be checked first.  After all, if the source is not authenticated, how do you know that it is the person on your whitelist, thus defeating the purpose of the whitelist. 

Doug Soltesz

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 09 July 2004 at 3:37pm

Perhaps, but that is the ultimate danger of a whitelist ... that a Spammer could exploit it.  The whole point of  white listing something or somebody is to get them past the filters because something is otherwise blocking them ... yes?  Again,  I may be wrong on this point.

Dan S.

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4066
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 July 2004 at 12:06am

Doug,

Dan is correct, whitelists "win" over the blacklists. That is by design and will not likely change.

Scenario. If a domain has an SPF record which prevents a user (Joe) to send email using his own SMTP servers , but one of your users really needs to receive email from Joe, your only solution is to use a whitelist, which will override the SPF filter. WHitelists are the last resort to receive email no matter what the filter. They're powerful, but also dangerous.

Roberto F.
LogSat Software

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.078 seconds.