Checking if SPF is being used

2010-05-05 Thread a . smith
Hi, how can I check if SpamAssassin is checking SPF? I ask because we have had instances of spam being delivered using a spoofed email address that is from a domain actually hosted on our mail server, which shouldn´t happen if SPF is being used (SPF is configured in DNS for the domain

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
PS in my init.pre SPF is loaded: loadplugin Mail::SpamAssassin::Plugin::SPF Quoting a.sm...@ukgrid.net:

Re: Checking if SPF is being used

2010-05-05 Thread Benny Pedersen
On ons 05 maj 2010 14:53:06 CEST, wrote No, score=1.8 required=4.8 tests=BAYES_00,HTML_MESSAGE, MIME_HTML_ONLY,MISSING_MID,RDNS_NONE,URIBL_BLACK autolearn=no version=3.3.0 no spf, and 3.3.1 is latest :) Anyone give me any clues? spamassassin 21 -D -t msg | grep spf | less perldoc

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
Hi Benny, thanks for the info. As I mentioned in a follow up I have the plugin listed to load in my init.pre. But as you rightly guessed SPF isnt loaded, as per the spamassassin -D -t msg test you described. So what can be missing? I must admit to finding the configuration files quite

Re: Checking if SPF is being used

2010-05-05 Thread Benny Pedersen
On ons 05 maj 2010 15:51:31 CEST, wrote thanks for the info. As I mentioned in a follow up I have the plugin listed to load in my init.pre. But as you rightly guessed SPF isnt loaded, as per the spamassassin -D -t msg test you described. any spf from @inc ? -- xpoint

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
Hi Benny, do you mean in the general perl envrionment? From that I have the following available regarding mail: Actually I just realised I didnt run the test command against a real mail, Ive just rerun it and I get loads of SPF stuff, starting like this: May 5 15:30:31.372 [12084]

Re: Checking if SPF is being used

2010-05-05 Thread Benny Pedersen
On ons 05 maj 2010 16:33:39 CEST, wrote tests_pri_-400: 4 (0.0%), tests_pri_0: 2040 (23.4%), check_spf: 76 (0.9%), check_razor2: 1643 (18.9%), check_pyzor: 0.39 (0.0%), tests_pri_500: 2506 (28.8%) i see check spf there, but might fail on missing perl module Mail::SPF So its using SPF

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
From this maillist the x-spam-status is: No, score=-11.1 required=4.8 tests=BAYES_00,RCVD_IN_DNSWL_HI, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_SAFE,RDNS_NONE,SPF_PASS autolearn=unavailable version=3.3.1 Hehe, this is another server which is on Spamassassin 3.1.1, seems it is using SPF on this

Re: Checking if SPF is being used

2010-05-05 Thread Michael Scheidell
On 5/5/10 11:15 AM, a.sm...@ukgrid.net wrote: So I think that proves it is using SPF doesnt it? If you´d agree then my next question is why did it delivery mail with a spoofed email address of a domain that it is hosted on our mail server? Im using exim and Im looking at an example of this

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
Hi Micheal, ok I have to come clean on a little error here which Ive just been thinking over, which by coincidence I have noticed attempting to mail Benny. Benny's email server bounced my mail due to an SPF error, which I have never seen myself on my mail nor reported by anyone using this

Re: Checking if SPF is being used

2010-05-05 Thread Benny Pedersen
On ons 05 maj 2010 17:15:56 CEST, wrote So I think that proves it is using SPF doesnt it? yes If you´d agree then my next question is why did it delivery mail with a spoofed email address of a domain that it is hosted on our mail server? Im using good question, was it ? read perldoc

Re: Checking if SPF is being used

2010-05-05 Thread Benny Pedersen
On ons 05 maj 2010 17:45:20 CEST, wrote Im not sure if I can test this, obviously running spamassassin from the command line isnt going to be able check against the sending host of the mail (as there is none). http://old.openspf.org/wizard.html?mydomain=ukgrid.netsubmit=Go! -- xpoint

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
Thanks, I was meaning I dont know if I can test spamassassin to see if it now correctly scores email. If I can get another server to relay some mail I guess, right now I cant think of one Quoting Benny Pedersen m...@junc.org: On ons 05 maj 2010 17:45:20 CEST, wrote Im not sure if I

Re: Checking if SPF is being used

2010-05-05 Thread a . smith
ok for the header bitty, Im using envelope_sender_header Return-path Which I think should be appropriate for exim, and Im sticking it in the user_prefs in the home dir of the user that spamd runs as. Is that the right config file? thanks Andy.

Re: Checking if SPF is being used SOLVED

2010-05-05 Thread a . smith
Hi, thanks a lot for your help, its seems to be working great now. I sent a message from a server not defined in the domain SPF using my email address and it got a failed spam scored based on SPF_FAIL :) Great :) thanks to everyone who commented, Andy.