2005/10/22

Sender Policy Framework


If you are famililar with SMTP protocol, no doubt you realize that spammers can give any valid domains in the "mail from" field as a way of forging the sender email address in spamming. Meng Weng Wong has come up with a solution called Sender Policy Framework (SPF) for sender domain authentication. To this end, the DNS record of every Internet server should be associated with some text strings to denote what IP addresses are allowed to use that domain name in email delivery. Existing DNS software such as Bind 9.X can cope with SPF. Not sure about Microsoft DNS. SMTP servers need to be upgraded to make them SPF-enabled by way of reversing MX lookup.

This new technology could somehow reduce the amount of email spam. Thanks to Meng Weng Wong again.

No comments: