RE: [Declude.JunkMail] Syntax for spf
Title: RE: Syntax for spf --- To use the new SPF test, you can add lines such as: SPFPASS spf pass x -5 0 SPFFAIL spf fail x 8 0 to your global.cfg file. SPF returns PASS for E-mail that passes SPF (that comes from an IP that is acceptable to the owner of the domani that it claims to be coming from), FAIL for E-mail that fails SPF (that does not come from an acceptable IP for the domain), or UNKNOWN (for E-mail from domains that do not use SPF yet, or for some other reason should return UNKNOWN). --- I've just added the above lines to my global config. After checking the Declude log, I see no indication that Declude is performing this test. What am I missing? Log snippet pasted below: 06/30/2004 07:39:55 Qa66c030305e846d1 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: xxx.xxx.xxx.xxx ID: 06/30/2004 07:39:55 Qa66c030305e846d1 Tests failed [weight=25]: NOABUSE=WARN NOPOSTMASTER=WARN BADHEADERS=WARN HELOBOGUS=WARN SPAMHEADERS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=ATTACH WEIGHT15=HOLD CATCHALLMAILS=IGNORE InHeadersFilter=WARN I am running v 1.79 beta. Everything else seems to be working fine. Thanks, Sharyn
RE: [Declude.JunkMail] Syntax for spf
SPFPASS spf passx -5 0 SPFFAIL spf failx 8 0 I've just added the above lines to my global config. After checking the Declude log, I see no indication that Declude is performing this test. What am I missing? You'll only see E-mails pass or fail if they have SPF records -- for other domains, a response of unknown is returned (which won't affect the weight of the E-mail with the settings above). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Syntax for spf
To put numbers behind Scott's statement. For June 1% of all e-mail triggered SPFPASS and 1.4% of all e-mail triggered SPFFAIL To confuse the issue somewhat: 26% of the e-mail that triggered SPFPASS was classified as SPAM 3% of the e-mail that triggered SPFFAIL was classified as SPAM Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 06/30/04 07:43AM SPFPASS spf passx -5 0 SPFFAIL spf failx 8 0 I've just added the above lines to my global config. After checking the Declude log, I see no indication that Declude is performing this test. What am I missing? You'll only see E-mails pass or fail if they have SPF records -- for other domains, a response of unknown is returned (which won't affect the weight of the E-mail with the settings above). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
