SPF records @fedoraproject.org versus @lists.fedoraproject.org

[Reindl Harald]

Am 05.10.2015 um 16:16 schrieb Stephen John Smoogen:
> On 4 October 2015 at 03:03, Reindl Harald <h.reindl at thelounge.net> wrote:
>> is there a reason that the list-subdomain has a SPF record but the main
>> domain not? now that as example "bodhi at fedoraproject.org" sends a lot of
>> mails it would make sense to shortciruit them as ham on spamfilters as it is
>> possible for the mailing-lists
>
> I think the fact that various people use N at fedoraproject.org as their
> email address. If we put an SPF that bodhi email comes from a certain
> address area, then those people will need to send email also from that
> zone or be treated as SPAM. Of course I could be completely wrong
> here.. and I am ok with that.

well, that people should send their mail from the Fedora servers and not 
from a wrong configured random MTA allowing random envelope senders

however, it would make a lot of sense use for infrastructure mails a own 
subdomain like "lists.fedoraproject.org" because handling them different 
then personal sent mails from probably hacked accounts

BTW - that should also be the bodhi-adress and not the karma commenter 
as envelope:

Return-Path: lupinix at fedoraproject.org
[Fedora Update] [comment] kde-runtime-15.08.1-2.fc22

>> ________________________
>>
>> lists.fedoraproject.org. 300    IN      TXT     "v=spf1 mx
>> a:lists.fedoraproject.org a:bastion.fedoraproject.org
>> a:bastion02.fedoraproject.org a:bastion01.fedoraproject.org ~all"
>> ________________________
>>
>> [harry at srv-rhsoft:~]$ dig TXT fedoraproject.org
>> ; <<>> DiG 9.10.2-P4-RedHat-9.10.2-5.P4.fc22 <<>> TXT fedoraproject.org
>> ;; global options: +cmd
>> ;; Got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47349
>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
>>
>> ;; OPT PSEUDOSECTION:
>> ; EDNS: version: 0, flags:; udp: 1024
>> ;; QUESTION SECTION:
>> ;fedoraproject.org.             IN      TXT
>>
>> ;; AUTHORITY SECTION:
>> fedoraproject.org.      120     IN      SOA     ns04.fedoraproject.org.
>> hostmaster.fedoraproject.org. 2443921540 3600 600 2419200 86400
>>
>> ;; Query time: 27 msec
>> ;; SERVER: 127.0.0.1#53(127.0.0.1)
>> ;; WHEN: So Okt 04 10:59:15 CEST 2015
>> ;; MSG SIZE  rcvd: 98

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20151005/b64a6824/attachment.sig>