Kevin,
The SPFFAIL test states in the manual.
"This test will be triggered if an E-mail fails SPF
Note that it will not be triggered for E-mail that has other problems (no SPF record, unknown results from the SPF record, etc.). So any E-mail failing the SPFFAIL test is E-mail that is not authorized per the administrator of the domain the E-mail is being sent from."
Note that it will not be triggered for E-mail that has other problems (no SPF record, unknown results from the SPF record, etc.). So any E-mail failing the SPFFAIL test is E-mail that is not authorized per the administrator of the domain the E-mail is being sent from."
So if you do neither SPFFAIL or SPFPASS are triggered, you have essentially received an SPFUNKNOWN response.
Dean
On 11/21/05, Kevin Bilbee <[EMAIL PROTECTED]> wrote:
As far as I know declude only supports SPFFAIL and SPFPASS.
Please direct me to the release notes/documentation if I am wrong.
Kevin Bilbee
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto: [EMAIL PROTECTED]]On Behalf Of David Barker
> Sent: Monday, November 21, 2005 1:26 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [ Declude.JunkMail] Global.cfg lines for SPF
>
>
> This is the correct syntax.
>
> SPFFAIL spf fail x 0 0
> SPFPASS spf pass x 0 0
> SPFUNKNOWN spf unknown x 0 0
>
> David B
> www.declude.com
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Brad Morgan
> Sent: Monday, November 21, 2005 4:00 PM
> To: Declude.JunkMail@declude.com
> Cc: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Global.cfg lines for SPF
>
> >
> > I use:
> > SPFPASS spf pass x 0 0
> > SPFUNKNOWN spf unknown x 0 0
> > SPFFAIL spf fail x 50 0
> >
> > > Set 1:
> > > SPFFAIL spf fail x 9 0
> > > SPFPASS spf pass x 0 0
> > >
>
> Thanks for the quick responses. I did have the correct pair of lines in my
> global.cfg file but I have received messages over the weekend
> which Imail's
> SPF check marked as SPFFAIL but Declude did not. The messages were what
> F-Prot is now calling W32/[EMAIL PROTECTED] and appear to be from my own domain.
> Since I have an SPF record, they should have failed the Declude check but
> they did not. As a result the first few that arrived before F-Prot updated
> their databases and were delivered to my users. I'm aware of at least one
> user who attempted to open the zip file.
>
> Is this a bug in 2.0.6.16? Is it fixed in 3.0.5.20?
>
> Brad Morgan
> IT Manager
> Horizon Interactive Inc.
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
> Declude.JunkMail ". The archives can be found at
> http://www.mail-archive.com.
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com .
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
>
>
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
__________________________________________
Dean Lawrence, CIO/Partner
Internet Data Technology
888.GET.IDT1 ext. 701 * fax: 888.438.4381
http://www.idatatech.com/
Corporate Internet Development and Marketing Specialists
