Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Jan 2007 03:34:22 +0000
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        "Jason C. Wells" <jcw@highperformance.net>
Cc:        freebsd general questions <freebsd-questions@freebsd.org>
Subject:   Re: Best SPF Implementation
Message-ID:  <459C75BE.90904@infracaninophile.co.uk>
In-Reply-To: <459C6C66.6010903@highperformance.net>
References:  <459C6C66.6010903@highperformance.net>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigCEF6C7823450948DC6283A6D
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: quoted-printable

Jason C. Wells wrote:
> Which of the ports provides the best SPF implementation for FreeBSD
> running sendmail?
> I messed around with SPF when it was still in it's infancy.  There seem=

> to be more choices now.  I value ease of use if that is a useful
> discrimination.  I really need to add something to spamassasin to
> prevent receiving the spam in the first place.  I hate spending time on=

> this but these guys are killing me.

SpamAssassin should already have SPF checking capability.  Check that you=

have the p5-Mail-SPF-Query port installed.  Then check that there is a
line:

    loadplugin Mail::SpamAssassin::Plugin::SPF

in one of the files under /usr/local/etc/mail/spamassassin/ -- probably
init.pre

Note: this will not absolutely accept/reject mail based on SPF records
alone.  It will use SPF data to contribute to its spam scoring.
Empirically it has been found that a matching SPF record is *not* a
good predictor that a message is ham, but a non matching SPF record
is a good predictor that a message is spam.  (Or, in other words,
some spammers are perfectly capable of setting up their own SPF
records in the DNS)

If you want to apply strict SPF checking, then the mail/sid-milter port
is a pretty good choice.

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       7 Priory Courtyard
                                                      Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey         Ramsgate
                                                      Kent, CT11 9PW


--------------enigCEF6C7823450948DC6283A6D
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.1 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFnHXE8Mjk52CukIwRCFivAJ9SbdJuP7x9PpcdnPFsUD/Sl/XDBgCZAdkr
RiXcLA0swMT8o/h1j3pI7cM=
=rgLK
-----END PGP SIGNATURE-----

--------------enigCEF6C7823450948DC6283A6D--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?459C75BE.90904>