-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
seth vidal wrote:
On Wed, 2009-01-28 at 10:45 -0800, Scott Silva wrote:
But it also made the announce-list. I assumed the announce list was only writable by a select few.
and the email came from lance@centos.org
lance@centos.org was one of the select few.
There is no SPF record for centos.org
If one can be added then this sort of fakes can be prevented. Anyone using the centos.org domain in email should login to a centos.org server to send out email that way.
I know it works because that is how I send out email from my own domain. All family members need to use the central server as relay to send out email with the family domain. And they can only authenticate using TLS and SASL.
Hugo.
- -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon?
Bored? Click on http://spamornot.org/ and rate those images.
Nid wyf yn y swyddfa ar hyn o bryd. Anfonwch unrhyw waith i'w gyfieithu.