Tom Diehl on 21 Mar 2004 20:05:03 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Re: SPF


On Sun, 21 Mar 2004, Malcolm J Harwood wrote:

> On Sunday 21 Mar 2004 12:59, Paul wrote:
> 
> > >It would be SPF: http://spf.pobox.com/
> >  From what I've read so far SPF will only be effective if a high
> > percentage of mail servers implement it.  I know it's a start if, say,
> > everyone one this lists implements SPF, but would that make much of a
> > difference?  What we it really take to make SPF effective?
> 
> Actually if aol, hotmail and yahoo implement the DNS  side, that's 90% of the 
> spam I see (as forged addresses from those domains are the most common). It 
> wont have the same effect against virii and worms as those tend to be more 
> widespread domain-wise.

Just set up your mta to reject mail that has a from header of aol.com, etc but
does not come from aol.com mail servers. 99.999% of the mail I see with an 
aol.com, yahoo.com, hotmail.com etc. from header originates from some other
mail server. That mail I drop on the floor. It a always spam. Postfix can
easily do this. I do not know about other mta's but I am sure it is possible.

There was a long thread about SPF on the postfix mailing list back a couple
of months (about the time aol tested it) and the general consensus was that SPF
sucked. I did not pay enough attention to to understand all of the details but
if you are interested I am sure you can search the archives and read it for
yourself.

Tom
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug