[Mailman-Users] SPF best practices?

[Jim Popovitch]

On Sun, Aug 23, 2015 at 2:42 AM, Dennis Carr
<dennisthetiger at chez-vrolet.net> wrote:
> After a rash of bounces that brought to my attention that my SPF
> record was not properly published, I rewrote my SPF record a bit.  What
> I'm looking for is some insight on best practices and a second set of
> eyes, as my list hosts for addresses all over the internet.
>
> The record is such:
>
> v=spf1 ip4:206.225.172.6 a:bast.chez-vrolet.net a:chez-vrolet.net
> a:smtp.comcast.net ~all
>
> This is published as a TXT record as per specification.
>
> The a:smtp.comcast.net is necessary so I can send email remotely
> through my ISP and clear out successfully.


Try this:

   "v=spf1 mx a:comcast.net -all"

Or this:

    "v=spf1 ip4:206.225.172.6 a:comcast.net -all"

The first one is flexible over time, the 2nd one is more strict.

> I'm a bit bothered by the '~all', however.  I really don't want to do
> '-all' as I'm concerned that anybody who posts to the list would cause
> anybody on Yahoo or the MSFT owned domains (hotmail, live, etc.) to
> bounce again.

You do want -all, as Mailman sends from $list-bounces at domain.tld, not
user at gmail.com

-Jim P.