diff -urN src.orig/include/spf.h src/include/spf.h --- src.orig/include/spf.h Thu Feb 17 02:56:55 2005 +++ src/include/spf.h Fri Jun 20 10:17:43 2008 @@ -51,9 +51,9 @@ /* ********************************************************************* */ /* FYI only -- defaults can't be changed without recompiling the library */ -#define SPF_DEFAULT_MAX_DNS_MECH 10 /* DoS limit on SPF mechanisms */ -#define SPF_DEFAULT_MAX_DNS_PTR 5 /* DoS limit on PTR records */ -#define SPF_DEFAULT_MAX_DNS_MX 5 /* DoS limit on MX records */ +#define SPF_DEFAULT_MAX_DNS_MECH 64 /* DoS limit on SPF mechanisms */ +#define SPF_DEFAULT_MAX_DNS_PTR 10 /* DoS limit on PTR records */ +#define SPF_DEFAULT_MAX_DNS_MX 64 /* DoS limit on MX records */ #define SPF_DEFAULT_SANITIZE 1 #define SPF_DEFAULT_WHITELIST "include:spf.trusted-forwarder.org" #define SPF_EXP_MOD_NAME "exp-text" diff -urN src.orig/include/spf_internal.h src/include/spf_internal.h --- src.orig/include/spf_internal.h Thu Feb 24 06:10:49 2005 +++ src/include/spf_internal.h Fri Jun 20 10:17:17 2008 @@ -51,19 +51,19 @@ * your system caused by many DNS lookups, you might not even notice * that you are being used as part of a DDoS attack. */ -#define SPF_MAX_DNS_MECH 10 +#define SPF_MAX_DNS_MECH 64 #endif #ifndef SPF_MAX_DNS_PTR /* It is a bad idea to change this for the same reasons as mentioned * above for SPF_MAX_DNS_MECH */ -#define SPF_MAX_DNS_PTR 5 +#define SPF_MAX_DNS_PTR 10 #endif #ifndef SPF_MAX_DNS_MX /* It is a bad idea to change this for the same reasons as mentioned * above for SPF_MAX_DNS_MECH */ -#define SPF_MAX_DNS_MX 5 +#define SPF_MAX_DNS_MX 64 #endif #if 1 diff -urN src.orig/include/spf_server.h src/include/spf_server.h --- src.orig/include/spf_server.h Wed Dec 19 15:05:42 2007 +++ src/include/spf_server.h Fri Jun 20 10:17:54 2008 @@ -37,19 +37,19 @@ * your system caused by many DNS lookups, you might not even notice * that you are being used as part of a DDoS attack. */ -#define SPF_MAX_DNS_MECH 10 +#define SPF_MAX_DNS_MECH 64 #endif #ifndef SPF_MAX_DNS_PTR /* It is a bad idea to change this for the same reasons as mentioned * above for SPF_MAX_DNS_MECH */ -#define SPF_MAX_DNS_PTR 5 +#define SPF_MAX_DNS_PTR 10 #endif #ifndef SPF_MAX_DNS_MX /* It is a bad idea to change this for the same reasons as mentioned * above for SPF_MAX_DNS_MECH */ -#define SPF_MAX_DNS_MX 5 +#define SPF_MAX_DNS_MX 64 #endif struct SPF_server_struct {