Re: [CentOS] Reject Action For SPF

2012-05-09 Thread Giles Coochey
On 09/05/2012 15:16, Asymmetrics Webmaster wrote: While is a bad idea to reject mail without SPF records, its a good idea to reject email if the SPF record is present and incorrectly set or not authorized for the sender (hardfail). SA works after the email gets in the queue, but the most efficie

Re: [CentOS] Reject Action For SPF

2012-05-09 Thread Asymmetrics Webmaster
Behalf Of Giles Coochey Sent: Wednesday, May 09, 2012 12:28 PM To: centos@centos.org Subject: Re: [CentOS] Reject Action For SPF On 03/05/2012 18:07, John Hinton wrote: > On 5/3/2012 12:40 PM, Prabhpal S. Mavi wrote: > A couple of notes. > > 1. SPF was not designed to be used this way. It

Re: [CentOS] Reject Action For SPF

2012-05-09 Thread Giles Coochey
On 03/05/2012 18:07, John Hinton wrote: On 5/3/2012 12:40 PM, Prabhpal S. Mavi wrote: A couple of notes. 1. SPF was not designed to be used this way. It is doubtful that anyone has written anything that even remotely considered this option in use. You will likely have to write it yourself. Corr

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread John Hinton
On 5/3/2012 1:16 PM, Prabhpal S. Mavi wrote: >> 1. SPF was not designed to be used this way. It is doubtful that anyone >> has written anything that even remotely considered this option in use. >> You will likely have to write it yourself. >> >> 2. SPF is still in RFC testing, so it is not yet a fu

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread Peter Eckel
Hi Prabh, > Thanks for your advice, i actually know this. what would you say about > those who put there efforts to implement SPF. why they do it? *if* someone sets up SPF for their domain, SPF works. Among other things, it can greatly reduce the amount of backscatter you receive due to spammer

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread Prabhpal S. Mavi
> 1. SPF was not designed to be used this way. It is doubtful that anyone > has written anything that even remotely considered this option in use. > You will likely have to write it yourself. > > 2. SPF is still in RFC testing, so it is not yet a full internet > standard. And once it is, the stand

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread Prabhpal S. Mavi
> 1. SPF was not designed to be used this way. It is doubtful that anyone > has written anything that even remotely considered this option in use. > You will likely have to write it yourself. > > 2. SPF is still in RFC testing, so it is not yet a full internet > standard. And once it is, the stand

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread John Hinton
On 5/3/2012 12:40 PM, Prabhpal S. Mavi wrote: >> are you sure you want to do this? It will definitely result in lots of >> legitimate mail being blocked, because SPF is by no means ubiquitous. >> >> You can set up your mail server to block mail if the SPF record suggests >> it, but I would never fi

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread Prabhpal S. Mavi
> are you sure you want to do this? It will definitely result in lots of > legitimate mail being blocked, because SPF is by no means ubiquitous. > > You can set up your mail server to block mail if the SPF record suggests > it, but I would never filter mail originating from domains having no SPF >

Re: [CentOS] Reject Action For SPF

2012-05-03 Thread Peter Eckel
Hi Prabh, > i have setup SPF alright, postfix is performing check as well (results > below), but even if there is no SPF record exist for a domain, message is > still accepted. > > how can i set the reject action, if no SPF available. are you sure you want to do this? It will definitely result

[CentOS] Reject Action For SPF

2012-05-03 Thread Prabhpal S. Mavi
Dear Friends, i have setup SPF alright, postfix is performing check as well (results below), but even if there is no SPF record exist for a domain, message is still accepted. how can i set the reject action, if no SPF available. May 3 16:11:14 titan postfix/policy-spf[5353]: : SPF none (No appl