Re: [newtech-1] Faking the From Address (was: shakira photo gallery, etc.)

From: Whitney M.
Sent on: Wednesday, October 24, 2007 1:55 PM
Yeah, it'll be interesting to see what Meetup does...though as I note 
below I think that we might not need them to do anything at all. :)

Based on the message that you received it looks like Meetup *does* do 
SPF checks on incoming mail to the list:  because the spammer's message 
spoofing your email address failed the check for gmail.com, the message 
wasn't delivered to the list.  This is an official Good Thing.

My earlier message got through because it turns out that I've been a 
lameass slacker and forgot to set up an SPF record for absono.us:  
without a published statement regarding what servers are allowed to send 
for the domain, Meetup apparently errs on the side of generosity and 
allows all messages through. [Can someone from Meetup confirm that I'm 
correct in this analysis, by the way?]

The same applies to Dean -- not the "lameass slacker" part, of course, 
but the part about his domain  not having an SPF record set up.  No SPF 
record, no way for Meetup to determine whether a given email is actually 
coming from you.

So here's my suggestion:  if you're using one of the big email providers 
(gmail, yahoo, what-have-you) you don't need to do anything at all.  If 
you're sending your mail from your own domain or a corporate domain, on 
the other hand, see about getting an SPF record set up if you don't 
already have one.  It's not hard:  Google "create SPF record" if this is 
a new area for you, and (within reason) I'm happy to offer advice or 
assistance for anyone who needs it.

Seems like this is a problem that we can (largely) address ourselves, no 
Meetup intervention required.  I'll have my SPF record in place by this 
evening. :)

Thanks,
Whit

**
W.B. McNamara
[address removed]
646-NEptune7-7791

Ilya Z wrote:
> Yea - that's the reality of email. Curious how will meetup address this?
>
> For the past 30 minutes all my emails (even [address removed] 
> <mailto:[address removed]>) were getting rejected. Seems they took 
> their email servers down (due to spam issue?)
>
> All emails bounced with:
> Technical details of permanent failure:
> PERM_FAILURE: SMTP Error (state 13):[masked] 
> <wa-out-1112.goog­le.com[[masked] <http://209.85.146...;­: 
> Client host rejected: Access denied

Our Sponsors

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy