[dns-operations] SPF

[SM]

Hi Fred,
At 11:12 10-04-2016, Fred Morris wrote:
>I acknowledge that this is getting a little far from the remit, but I'm
>looking at some "DNS failures" related to mail delivery and I'm rather taken
>aback by some of the SPFs I'm seeing.
>
>For instance this one, for a domain which a large corporation uses to send
>order confirmation emails:
>
>   "v=spf1 ptr ip4:65.197.19.23, ip4:12.43.140.23, ip4:12.43.146.43/32,
>ip4:12.43.146.44/32, ip4:12.43.146.45/32, ip4:12.43.146.46/32
>include:amazonses.com +all"
>
>(Besides the fact that it's broken because of the commas...) Doesn't 
>"+all" at
>the end mean that anyone can send e-mail purporting to be from these people?

Yes.  The above record is equivalent to "v=spf1 +all"

Regards,
-sm