Tim's SPF Page

• Its parsing is too complex
• No sane firewall is going to let TXT records through
• No sane firewall is going to let TCP DNS packets through
• The parsing can loop forever
• It will increase DNS scaning as spamers hunt for broken SPF records
• Its too complex to be implimented inside the MTA where it needs to be done
• It can't be properly parsed in sendmail
• ISO 8839 8859 59-15 utf-8 issues for domain names may kill some dns servers

In the header section add:
HX-SPF-Record: ${spfh}
Kspf dns -R TXT -T -r5

Then in the S Local_check_mail add:

SLocal_check_mail
R<$*@$*>                $: $(macro {user} $@ $1 $) $(macro {host} $@ $2 $)
R$*                     $: $&{user}:$&{host}
R$*                     $: $(macro {spfh} $@ No SPF Records $)
R$*                     $: $(spf $&{host} $: No TXT Record $)
Rv=spf1 $*              $: $(macro {spfh} $@ $1 $)