Re: [Declude.JunkMail] Declude and SPF

[Matt]

It's a bad idea to use SPFPASS.  Spammers are already exploiting this and there is no way to stop them from doing so.  Essentially SPF Pass is a hole in spam blocking just like Habeas is. SPF Fail should in theory give you similar results to SPAMDOMAINS, though it's not very widely adopted at present so the hits should be lower.  The authors of the standard have released a recommendation for how to solve the issue of forged addresses from legitimate senders (such as some greeting card sites, mail forms and the like), as well as how to handle forwarding so as to not trip the test.  At present though there is no support for the forwarding arrangement, and it seems that it will be close to impossible to fix the issues with things like mail forms, though progress has been made. Note that I don't use SPF because I don't see much value to it on my system.  If I didn't have things like SPAMDOMAINS, Sniffer, and a heap of custom filters primarily targeted at zombie spam, this would be more useful, however at this time I don't have a problem with zombie spam getting through and this test would likely just cause more false positives, especially when domains like aol.com are in both my SPAMDOMAINS file and making use of SPF records. Matt Markus Gufler wrote: What do you consider a wrong result???? If SPFPASS has a positive result (and so will SUBSTRACT points from the final weight) for a SPAM message. or If SPFFAIL has a positive result (and so will ADD points to the final weight) for a LEGIT message. In absolute numbers the "wrong results" are not more then other tests has. But this other tests has many many more "correct results" and so this tests become usefull. SPFPASS and SPFFAIL on my system has 60% of "correct" and 40% of wrong results. Either I am missing something or this tests are useless. Markus -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Markus Gufler Sent: Wednesday, May 05, 2004 12:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude and SPF No one else seeing such results with SPF? Markus -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Markus Gufler Sent: Wednesday, May 05, 2004 8:32 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude and SPF SPFPASS spf pass x -5 0 SPFFAIL spf fail x 8 0 Last month I've created SPF TXT records for some domains on our DNS. Some days ago I've added this two tests and now I can see not realy good results. Based on 9914 processed messages from yesterday SPFFAIL has had 38 correct results and 105 wrong results. SPFPASS has had 234 correct results and 80 wrong results. So only 4% of all processed messages has had ANY result. From this results 60 was correct and 40% wrong. Am I missing something? I know that not many domains has already SPF TXT records but introducing such a technology should produce bether results, or? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================