--On 30 October 2008 12:05:53 +0000 neil <[EMAIL PROTECTED]> wrote:

>   I've been trying to stop these bank phishing mails. Rather than trying
> to get the banks to implement DK, DKIM or SPF so I can check against
> that, I have the snippet below.

That's useful. It's shocking that most of these banks haven't implemented 
SPF. I guess that an SPF check before using your snippet might help. I've 
checked to see which on your list do implement SPF - at 
<http://www.kitterman.com/spf/validate.html>. Of course, none of this helps 
if the phishers don't use these domains!

#abbey.co.uk
#abbeynational.co.uk
#abbey.com
alliance-leicester.co.uk
americanexpress.com
   v=spf1 include:aexp.com ~all
#barclays.com
barclays.co.uk
egg.com
halifax.co.uk
#hsbc.co.uk
    v=spf1 mx ip4:193.108.72.63 ip4:193.108.75.63 ~all
hsbc.com
        v=spf1 mx ip4:212.249.34.148 ip4:208.131.51.20 ip4:63.95.36.174
    ip4:204.178.86.20 ip4:203.112.80.9/20 ip4:193.108.72.63/21
    ip4:212.11.24.10/26 ip4:195.68.113.10/26 ip4:85.119.232.200 ~all

#lloydstsb.co.uk
lloydstsb.com
#natwest.com
    v=spf1 ip4:155.136.0.0/16 ip4:209.202.164.3 ip4:209.202.164.124
    ip4:209.202.164.125 ip4:209.202.164.127 ip4:209.202.164.128
    ip4:64.28.91.221 ip4:62.105.122.12 ip4:83.100.142.14 ip4:194.150.182.18
    ip4:194.150.182.25 -all

#natwest.co.uk
#nwolb.com
paypal.com
    v=spf1 mx include:spf-1.paypal.com include:p._spf.paypal.com
    include:p2._spf.paypal.com include:s._spf.ebay.com
    include:m._spf.ebay.com include:c._spf.ebay.com
    include:silverpop.paypal.com include:walkerinfo.paypal.com ~all
    spf2.0/pra mx include:s._sid.ebay.com include:m._sid.ebay.com
    include:p._sid.ebay.com include:c._sid.ebay.com
    include:spf-2._sid.paypal.com include:silverpop._sid.paypal.com
    include:walkerinfo._sid.paypal.com ~all

rbs.com
    v=spf1 ip4:155.136.0.0/16 -all
#rbs.co.uk
    v=spf1 ip4:155.136.0.0/16 -all
#rbsdigital.com
#rbsdigital.co.uk
#sainsburysonline.com
#ybonline.co.uk

And, my bank:
smile.co.uk
  v=spf1 mx:cfs.co.uk include:foretelsystems.com -all

-- 
Ian Eiloart
IT Services, University of Sussex
x3148

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to