From owner-freebsd-questions@FreeBSD.ORG Thu Jan 4 03:34:50 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2439216A407 for ; Thu, 4 Jan 2007 03:34:50 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.187.76.162]) by mx1.freebsd.org (Postfix) with ESMTP id 79FB313C457 for ; Thu, 4 Jan 2007 03:34:48 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from [IPv6:::1] (localhost.infracaninophile.co.uk [IPv6:::1]) by smtp.infracaninophile.co.uk (8.13.8/8.13.8) with ESMTP id l043YSkr041338; Thu, 4 Jan 2007 03:34:28 GMT (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <459C75BE.90904@infracaninophile.co.uk> Date: Thu, 04 Jan 2007 03:34:22 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 1.5.0.9 (X11/20061223) MIME-Version: 1.0 To: "Jason C. Wells" References: <459C6C66.6010903@highperformance.net> In-Reply-To: <459C6C66.6010903@highperformance.net> X-Enigmail-Version: 0.94.0.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigCEF6C7823450948DC6283A6D" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (smtp.infracaninophile.co.uk [IPv6:::1]); Thu, 04 Jan 2007 03:34:43 +0000 (GMT) X-Virus-Scanned: ClamAV 0.88.7/2412/Thu Jan 4 00:53:52 2007 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00, DKIM_POLICY_TESTING,NO_RELAYS autolearn=ham version=3.1.7 X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd general questions Subject: Re: Best SPF Implementation X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jan 2007 03:34:50 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigCEF6C7823450948DC6283A6D Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable Jason C. Wells wrote: > Which of the ports provides the best SPF implementation for FreeBSD > running sendmail? > I messed around with SPF when it was still in it's infancy. There seem= > to be more choices now. I value ease of use if that is a useful > discrimination. I really need to add something to spamassasin to > prevent receiving the spam in the first place. I hate spending time on= > this but these guys are killing me. SpamAssassin should already have SPF checking capability. Check that you= have the p5-Mail-SPF-Query port installed. Then check that there is a line: loadplugin Mail::SpamAssassin::Plugin::SPF in one of the files under /usr/local/etc/mail/spamassassin/ -- probably init.pre Note: this will not absolutely accept/reject mail based on SPF records alone. It will use SPF data to contribute to its spam scoring. Empirically it has been found that a matching SPF record is *not* a good predictor that a message is ham, but a non matching SPF record is a good predictor that a message is spam. (Or, in other words, some spammers are perfectly capable of setting up their own SPF records in the DNS) If you want to apply strict SPF checking, then the mail/sid-milter port is a pretty good choice. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enigCEF6C7823450948DC6283A6D Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.1 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFnHXE8Mjk52CukIwRCFivAJ9SbdJuP7x9PpcdnPFsUD/Sl/XDBgCZAdkr RiXcLA0swMT8o/h1j3pI7cM= =rgLK -----END PGP SIGNATURE----- --------------enigCEF6C7823450948DC6283A6D--