Re: [Declude.JunkMail] SPF BIND OT question

2003-12-18 Thread Nick Hayer
Scott - 

If you would a little help please w/my Bind to impliment SPF:

In a zone file I would add:
example.com. IN TXT v=spf1 mx ptr ip4:63.170.56.4 -all
mail.example.com. IN TXT v=spf1 a -all
mail2.example.com. IN TXT v=spf1 a -all

Is this correct - one line for the domain and one line for each 
mailserver?

Thanks!

-Nick Hayer




Date sent:  Thu, 18 Dec 2003 14:33:38 -0500
To: [EMAIL PROTECTED]
From:   R. Scott Perry [EMAIL PROTECTED]
Subject:Re: [Declude.JunkMail] SPF support to be added to next beta
Send reply to:  [EMAIL PROTECTED]

 
 We will be adding support for SPF (Sender Permitted From, at 
 http://spf.pobox.com ) to the next beta of Declude JunkMail.  This is
 a system that lets owners of domains publish information on what
 mailservers people can use to send mail from the domain.  We expect
 that this can be very useful in blocking spam (similar to the
 SPAMDOMAINS test), as well as helping ensure that legitimate mail
 gets through.
 
 For those that are interested, we now have an interim release with SPF
 support in it.  It can be downloaded from
 http://www.declude.com/interim (a new URL that we are going to be
 using for interim releases, that explains a bit more about them).  To
 use the new SPF test, you can add lines such as:
 
 SPFPASS spf passx   -5  0
 SPFFAIL spf failx   8   0
 
 to your global.cfg file.  SPF returns PASS for E-mail that passes
 SPF (that comes from an IP that is acceptable to the owner of the
 domani that it claims to be coming from), FAIL for E-mail that fails
 SPF (that does not come from an acceptable IP for the domain), or
 UNKNOWN (for E-mail from domains that do not use SPF yet, or for
 some other reason should return UNKNOWN).
 
 This will help reduce false positives (for domains that have SPF
 support), and help capture more spam (as spam comes in from domains
 that have SPF support, but the spammer isn't using an acceptable IP).
 
-Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail
 mailservers. Declude Virus: Catches known viruses and is the leader in
 mailserver vulnerability detection. Find out what you've been missing:
 Ask about our free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SPF BIND OT question

2003-12-18 Thread R. Scott Perry

If you would a little help please w/my Bind to impliment SPF:

In a zone file I would add:
example.com. IN TXT v=spf1 mx ptr ip4:63.170.56.4 -all
mail.example.com. IN TXT v=spf1 a -all
mail2.example.com. IN TXT v=spf1 a -all
Is this correct - one line for the domain and one line for each
mailserver?
Yes, that looks good to me.  :)

With those, mail coming from [EMAIL PROTECTED] or 
[EMAIL PROTECTED] will fail unless they come from the IP of 
mail.example.com or mail1.example.com.  Mail coming from [EMAIL PROTECTED] 
could come from any IP in the MX record of example.com, any IP with a 
reverse DNS at .example.com, or the IP 63.170.56.4.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.