Zitat von Benny Pedersen <[email protected]>:
[email protected] skrev den 2014-05-28 18:54:But as always YMMVif spf pass and its spam why not reject that sender domain in postfix ? any solution always changes the problem :=)
The domains change at least once per week, the netblock every 3-6 months but all are perfectly valid setup regarding SPF/DKIM and forward/reverse DNS. As they are typically at ~ 2-4 Mails per day and account passing our restriction at max. we can handle this by hand (-> delete). But it stands that SPF/DKIM is not useful in preventing spam at all. For preventing Phishing the lacking mail client support is the killer. Most only display the display name and don't care of address or DKIM matching at all. Beside this there is already a solution against address spoofing called S/MIME with some additional benefits like encryption.
Regards Andreas
smime.p7s
Description: S/MIME Cryptographic Signature
