Reject Action For SPF

[Prabhpal S. Mavi]

Dear Friends,

i have setup SPF alright, postfix is performing check as well (results
below), but even if there is no SPF record exist for a domain, message is
still accepted.

how can i set the reject action, if no SPF available.

May  3 16:11:14 titan postfix/policy-spf[5353]: : SPF none (No applicable
sender policy available): Envelope-from: somedomain.com

Prabh S. Mavi



Prabh S. Mavi



_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"

[Glen Barber-2]

On Thu, May 03, 2012 at 04:30:53PM -0000, Prabhpal S. Mavi wrote:
>
> Dear Friends,
>
> i have setup SPF alright, postfix is performing check as well (results
> below), but even if there is no SPF record exist for a domain, message is
> still accepted.
>
> how can i set the reject action, if no SPF available.
>

Why would you want to reject mail from legitimite senders that do not
have SPF records published?

Glen

_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"

[Prabhpal S. Mavi]

> Why would you want to reject mail from legitimite senders that do not
> have SPF records published?
>
> Glen

Dear Glen. B

Thanks for your response, We want to implement this no our backup MX
server. i trust this explains the reason. i know SPF is not spam
prevention mechanize. Can you tell me how to set reject action?


Prabh S. Mavi



_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"

[Mark Andrews-4]

In message <[hidden email]

>, "Prabhpal S. Mavi" writes:
>
> > Why would you want to reject mail from legitimite senders that do not
> > have SPF records published?
> >
> > Glen
>
> Dear Glen. B
>
> Thanks for your response, We want to implement this no our backup MX
> server. i trust this explains the reason. i know SPF is not spam
> prevention mechanize. Can you tell me how to set reject action?

Fix your backup server to have the data required to perform the
filtering.  Don't force the rest of the world to waste cycles and
bandwidth attempting to send email to a backup MX that you have
advertised.  If you can't do it correctly, DO NOT DO IT.

> Prabh S. Mavi
>
> _______________________________________________
> [hidden email] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "[hidden email]"
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: [phone]                 INTERNET: [hidden email]
_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"

[Prabhpal S. Mavi]

> Fix your backup server to have the data required to perform the
> filtering.  Don't force the rest of the world to waste cycles and
> bandwidth attempting to send email to a backup MX that you have
> advertised.  If you can't do it correctly, DO NOT DO IT.

Hello Mark. A

Don't you think you guys are telling that what is SPF and how should we
use it. SPF is in system for a while, almost everyone is aware what it is.
And what it does.

funny enough, no one answered to the actual question. all this info is
available on the web. Anyways


Prabh S. Mavi




_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"

[Holger Kipp-3]

Am 04.05.2012 um 09:45 schrieb Prabhpal S. Mavi:

>
>> Fix your backup server to have the data required to perform the
>> filtering.  Don't force the rest of the world to waste cycles and
>> bandwidth attempting to send email to a backup MX that you have
>> advertised.  If you can't do it correctly, DO NOT DO IT.
>
> Hello Mark. A
>
> Don't you think you guys are telling that what is SPF and how should we
> use it. SPF is in system for a while, almost everyone is aware what it is.
> And what it does.

Good reading:
http://david.woodhou.se/why-not-spf.html

> funny enough, no one answered to the actual question. all this info is
> available on the web. Anyways

You might want to alter http://bazaar.launchpad.net/~kitterman/postfix-policyd-spf-perl/trunk/view/head:/postfix-policyd-spf-perl
to return a proper reject-message if no spy-record was found.

Best regards,
Holger


--
Holger Kipp
Diplom-Mathematiker
Senior Consultant

Tel. : [phone]
Fax. : [phone]
Mobil: [phone]
Email: [hidden email]

alogis AG
Alt-Moabit 90b
D-10559 Berlin

web : http://www.alogis.com

----------------------------------------------------------

alogis AG
Sitz/Registergericht: Berlin/AG Charlottenburg, HRB 71484
Vorstand: Arne Friedrichs, Joern Samuelson
Aufsichtsratsvorsitzender: Reinhard Mielke
_______________________________________________
[hidden email] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[hidden email]"