Bug#290464: [Pkg-exim4-devel] SPF

[Robert Millan]

On Wed, Jul 26, 2006 at 11:36:05AM +0200, Marc Haber wrote:
> 
> Thank you. I have given you commit privileges in Debian pkg-exim4 svn.
> Please write good changelog and commit log entries. I reserve the
> right to back out any changes ;)
> 
> Since you have since then committed multiple changes to your ACL, is
> the one currently in svn actually useable?

They should be.  I always test my changes in my own SMTP server, so in case
there's a mistake, I would notice quickly! ;)

(as you can see in the svn log, this happened before)

> Can't exim do SPF checks itself without having to revert to the
> external spfquery utility? Or did you avoid this for a purpose, for
> example to avoid a hard dependency on libspf?

I avoided it on purpose, because:

  - Taking into account that I'm responsible for any mistakes in the config,
  I want it to be simple and well-tested, and the spfquery method is the one
  I'm best experienced with.

  - One of your concerns in README.Debian was that you didn't want an additional
  library dependency.  There's more potential for bugs and maintainance work in
  a library that is always linked in, that in a configuration snippet that is
  disabled by default, so I kind of agree with you on this.

  - I'm not sure if the built-in library supports all the features.  In
  particular, X-SPF-Guess headers, and other (more agressive) checks that I'm
  using myself but not putting into the package.

> If you are going a more complicated way to avoid the library
> dependency, we should have the documentation mention that there is an
> easier way of using SPF at the cost of locally building the binary
> packages.

Ok, will do.

-- 
Robert Millan

My spam trap is honeypot at aybabtu.com.  Note: this address is only intended for
spam harvesters.  Writing to it will get you added to my black list.