OK, I understand that, but he can not fake being AOL or Yahoo or anything anymore anyway.
Thanks for the explanation. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Tuesday, July 13, 2004 9:01 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? A static spammer purchases a domain name. He then sets up a SPF record for the domain name. E-mail sent out from the domain name will pass the SPF test. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 07/13/04 07:45AM >>> I thought with SPF that it checked the DNS of the actual domain, so how could spammers fake it with their own SPF settings? For example if a message comes from an AOL.com account, it should check the AOL.Com DNS, not some other DNS server. Maybe I am not understanding how this is working? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, July 12, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? You are missing a column: SPFPASS spf pass x 0 0 SPFUNKNOWN spf unknown x 0 0 SPFFAIL spf fail x 50 0 Personally, I don't recommend crediting any points for an SPF pass result. Too many spammers can set up SPF records for their system (and they do. Yesterday 58% of the SPF Pass results were spam). Also don't expect the world. More than 95% of my e-mail goes into SPFUNKNOWN. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 07/12/04 09:29AM >>> The entries are below. I am thinking they are correct, but I am not seeing anything in my logs that indicate this is working at all. SPFPASS pass x x -10 0 SPFFAIL fail x x 5 0 I did the install of MTLDB also and have not seen any entries on it either. If you need anything log wise, just let me know. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 12, 2004 9:23 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? >I know the list has been flooded, but I can not get any of these tests >working, anyone have any advice? What lines do you have in your global.cfg that begin with SPF? We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today on that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
