On 20/Jan/11 05:40, Mark Constable wrote: > opt BOFHSPFFROM=pass,none,neutral,unknown,error,mailfromok > > I've now added softfail according to Alessandros' example (thanks > for that and the explanation)
You're welcome. > so in the case of this list would I be better off removing > mailfromok so it only works on the initial qt.nokia.com (which does > not have a SPF record) and so therefor should pass? No, it will get "none". You need BOFHSPFFROM=off to accept that. > Also, the Nokia folks suggested I could whitelist their mail > server so is that possible (SPF whitelist)? AFAIK configuring it in smtpaccess is the only way. Not quite suited for this kind of whitelisting, as it seems difficult to automate it, unless you add records directly to smtpaccess.dat. Adding an IP on a local DNSWL might be preferable, but this is a work in progress that, thus far, has only been sketched. See http://www.mail-archive.com/[email protected]/msg35227.html Another technique that I've heard of is to keep a local database of "guessed SPF records" for domains that lack them... Of course, the easiest thing would be that Nokia trolls set such record themselves. -- ------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
