On Sat 12/May/2012 10:18:35 +0200 Lindsay Haisley wrote:
> 
> Does anyone have any stats, or reference to recent surveys, with some
> figures?

For a very very very skewed survey, since Courier is one of the MTA
packages that support SPF, its share among those who enable
reject-on-fail at the MAIL command (which excludes postfix, for
example) can be inferred from the attached file (5th to 8th place, I'd
say.)

I drew two random ~30K-entries samples from a bunch of ~250K domain
names, and found that reject-on-fail can be detected in some 1.2% of
cases by this method (which is part of why the test is so skewed for
your purpose.)

I'd bet Sam did explain why Courier doesn't start sessions with an
identifiable greeting text, but am unable to quickly find any pointer.

-- 
mysql> select mail_code, count(*) AS c, reply_mail from survey where 
result='R-ON-FAIL' group by mail_code, reply_mail order by c desc limit 10;
+-----------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| mail_code | c  | reply_mail                                                   
                                                                                
                                                             |
+-----------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|       550 | 48 | 5.7.1 Sender-Id/SPF check failed: not permitted in "MAIL 
FROM:<postmas...@spf-all.com>"                                                  
                                                                 |
|       550 | 44 | 5.7.1 Client host rejected: Please see 
http://spf.pobox.com/why.html?sender=postmaster%40spf-all.com&ip=62.94.243.226&receiver=
                                                                           |
|       554 | 32 | Sending address not accepted due to spam filter              
                                                                                
                                                             |
|       554 | 25 | refused mailfrom because of SPF policy                       
                                                                                
                                                             |
|       517 | 22 | SPF fail postmas...@spf-all.com: Address does not pass the 
Sender Policy Framework                                                         
                                                               |
|       587 | 15 | postmas...@spf-all.com sender domain does not match SPF 
records                                                                         
                                                                  |
|       550 | 14 | 5.7.1 <postmas...@spf-all.com>: Sender address rejected: 
Please see 
http://www.openspf.org/Why?id=postmaster%40spf-all.com&ip=62.94.243.226&receiver=eforward1c.registrar-servers.com
 : Reason: mechanism |
|       550 | 11 | 5.7.1 <postmas...@spf-all.com>: Sender address rejected: 
Please see 
http://www.openspf.org/Why?id=postmaster%40spf-all.com&ip=62.94.243.226&receiver=eforward1a.registrar-servers.com
 : Reason: mechanism |
|       550 | 10 | 5.7.1 SPF MAIL FROM check failed:                            
                                                                                
                                                             |
|       550 | 10 | 5.7.1 <postmas...@spf-all.com>: Sender address rejected: 
Please see 
http://www.openspf.org/Why?id=postmaster%40spf-all.com&ip=62.94.243.226&receiver=eforward1b.registrar-servers.com
 : Reason: mechanism |
+-----------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
10 rows in set (0.02 sec)

mysql> select mail_code, count(*) AS c, reply_mail from survey3 where 
result='R-ON-FAIL' group by mail_code, reply_mail order by c desc limit 10;
+-----------+----+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| mail_code | c  | reply_mail                                                   
                                                                                
                                                   |
+-----------+----+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|       550 | 45 | 5.7.1 Client host rejected: Please see 
http://spf.pobox.com/why.html?sender=dummy%40spf-all.com&ip=62.94.243.226&receiver=
                                                                      |
|       550 | 39 | 5.7.1 Sender-Id/SPF check failed: not permitted in "MAIL 
FROM:<du...@spf-all.com>"                                                       
                                                       |
|       554 | 33 | Sending address not accepted due to spam filter              
                                                                                
                                                   |
|       554 | 24 | refused mailfrom because of SPF policy                       
                                                                                
                                                   |
|       550 | 20 | 5.7.1 SPF MAIL FROM check failed:                            
                                                                                
                                                   |
|       550 | 15 | 5.7.1 <du...@spf-all.com>: Sender address rejected: Please 
see 
http://www.openspf.org/Why?id=dummy%40spf-all.com&ip=62.94.243.226&receiver=eforward1a.registrar-servers.com
 : Reason: mechanism |
|       587 | 13 | du...@spf-all.com sender domain does not match SPF records   
                                                                                
                                                   |
|       517 | 12 | SPF fail du...@spf-all.com: Address does not pass the Sender 
Policy Framework                                                                
                                                   |
|       550 | 10 | 5.7.1 <du...@spf-all.com>: Sender address rejected: Please 
see 
http://www.openspf.org/Why?id=dummy%40spf-all.com&ip=62.94.243.226&receiver=eforward1b.registrar-servers.com
 : Reason: mechanism |
|       550 |  9 | 5.7.1 <du...@spf-all.com>: Sender address rejected: Please 
see 
http://www.openspf.org/Why?id=dummy%40spf-all.com&ip=62.94.243.226&receiver=eforward1c.registrar-servers.com
 : Reason: mechanism |
+-----------+----+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
10 rows in set (0.02 sec)

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to