brian at spiceisle
May 25, 2009, 8:57 PM
Post #2 of 4
(363 views)
Permalink
|
I'm running into a similar problem here. At my gateway, numerous spam
messages are being tagged "SoftFail" by my SPF filter because the sender's
SPF record contains "~all".
I think the sending domain is basically tossing the responsibility back at
us to determine whether or not any e-mail received with a return address in
their domain is actually legitimate.
I'm trying to figure out the best way to deal with these "SoftFail"
messages, as there are a few legitimate ones trapped amongst the spam, so
blocking them entirely is out of the question for the moment.
For now, I'm trapping them into a special folder for manual review and
release, and I've configured my antispam gateway to send me a note whenever
it intercepts any. For those that I release, the sender's address is
automatically added to an SPF "whitelist", so future messages from that
address are automatically let through.
Regards,
Brian
-----Original Message-----
From: Curt Geesdorf [mailto:curt[at]iesanet.com.br]
Sent: Monday, May 25, 2009 20:19
To: spf-help[at]v2.listbox.com
Subject: [spf-help] ~all, ?all and -all
Hi all!
Many sites use "~all" and "?all" and never change for "-all", and
spammers are forging emails using those sites.
As I was tired of receiving so much junk, I changed the file
/usr/local/share/perl/5.8.8/Mail/SPF/Record.pm to consider all as "fail" ...
(...)
use constant results_by_qualifier => {
'' => 'pass',
'+' => 'pass',
'-' => 'fail',
'~' => 'fail', ----------------- MY CHANGE
'?' => 'fail' ----------------- MY CHANGE
# '~' => 'softfail', ----- ORIGINAL
# '?' => 'neutral' ----- ORIGINAL
};
(...)
[]s
*/Curt Geesdorf/*
<https://www1.lpi.org/pt_br/verify.html?lpi_id=LPI000090133&ver_code=uftmav5
p47>www.iesanet.com.br
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
|
