Re: [exim] Exim and SPF

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Ian Eiloart
Datum:  
To: Marc Perkel, exim-users
Betreff: Re: [exim] Exim and SPF


--On 10 December 2009 09:17:21 -0800 Marc Perkel <marc@???> wrote:

> Is anyone using SPF in Exim? I'm still trying to figure out a use for it.


If you do sender address whitelisting, you should insist on an SPF pass
first. 60% of the email that we deliver today has an SPF pass. Most of the
rest is from domains without SPF records.

If you see an SPF pass for a domain that you trust, then you should use SRS
before forwarding. Otherwise, you might prefer not to risk tarnishing your
domain reputation.

> One thing I thought of is a way of determining who is forwarding email.
> If SPF doesn't match but the email is clearly not spam then the sending
> host might be forwarding email and might make it on a list of legit
> forwarders.
>
> Might be a way of detecting spammers who use SPF by the hosts they
> reference in their SPF record.


I guess you should reject mail from domains with +all. I'm not sure if
Exim's SPF facilities do that.

> I might send out notices to those with too restrictive of SPF that their
> email might bounce if the recipient uses hosted spam filtering.
>
> What are the rest of you doing with SPF?




--
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/