If a spammer uses a domain that does not have an SPF record then it would depend on how you have configured Sender ID filtering on your end, if you configure to reject messages that do not come from a domain/server with an SPF record defined then message would not be through. Mark Fugatt Dedicated Supportability Engineer (Exchange) Microsoft Services Organisation Desk: +44 (0)118 909 5630 Mobile: +44 (0)7966 858108 MSN IM: markfu@xxxxxxxxxxxxxxxxx Blog: http://blogs.technet.com/mfugatt Dedicated to proactively supporting Microsoft's enterprise Customers Mark Fugatt - Exchange DSE This email may contain confidential information. If you are not named on the addressee list, please take no action in relation to this email, do not open any attachment, and please contact the sender (details above) immediately. Information in this email is provided in good faith. If you are a customer of Microsoft, please refer to the terms and conditions which cover the provision of support and consulting services to you/your organization. If you are not corresponding in the course of, or in connection with a Microsoft contract or program with its own terms and conditions, please note that no liability is accepted by Microsoft for the contents of this mail. -----Original Message----- From: nromero@xxxxxxxxxx [mailto:nromero@xxxxxxxxxx] Sent: 01 November 2005 16:57 To: [ExchangeList] Subject: [exchangelist] Re: MSExchange.org - Configuring and enabling Sender ID filtering in Exchange 2003 SP2 http://www.MSExchange.org/ Is SPF widely used? I tested a couple of spam messages against the dnsstuff.com SPF link from this article. The spammer was sending from a domain that doesn't have an SPF record so the message would have passed. Can spammers bypass this filter by simply using domains that do not have SPF records? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: markfu@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx