Hey ES,
Can you put the DKVERIFY options you recommend in the bug tracker as a
feature request for a new default?
I want to ensure that this is tracked and becomes the new default, so
as to keep people from losing important mail.
Thanks,
Erik
On 2/12/07, Eric Shubes <[EMAIL PROTECTED]> wrote:
[EMAIL PROTECTED] wrote:
> Hello,
> I've heard about this new feature for quite sometimes, but I haven't
> implemented it just yet. Until for the last few days I have been testing
> DomainKeys implementation in a lab, and it seems very capable of rejecting
> unsolicited mails.
>
> Thank you everyone for these resources:
> http://wiki.qmailtoaster.com/index.php/Domainkeys
> http://wiki.qmailtoaster.com/index.php/SPF
> http://www.bind9.net/manual/bind/9.3.2/Bv9ARM.ch06.html#id2564557
>
> However I still have some things to clear up:
> 1. How many mailserver out there that have implement this DK signature?
That's hard to tell. I'm using it, but not with the default DKVERIFY.
> 2. Will it safe to use the QT option of DKVERIFY="DEfGhIJK"? Wouldn't it
> reject many "legitimate" mails who haven't implemented DK signature?
If the message isn't signed, qmail-dk simply passes it along.
> 3. So, if I decide to temporarily turn off DK verification, is the option
> would be: "EfGhIJK"?
No, to turn it off for incoming you can use DKVERIFY="". That should let
everything pass through.
Notes:
.) qmail-dk has erroneously flagged a signature from gmail as bad (B)
.) qmail-dk does not check (honor) the t=? testing flag in DNS records
.) some list servers (googlegroups in particular) pass signed messages on in
a manner that causes qmail-dk to return a "G" status.
At the present time, I use DKVERIFY="DEfhIJK". I recommend others do the
same, until the time when Alexey has a chance to fix things up. He's already
done some excellent work fixing up qmail-dk, and has plans to do more.
> 4. What options can we use to "give a lesson" to spammer regarding DK? I'm
> thinking of giving the "soft reject" so that their mailservers will be
> overwhelmed with mails queue.
I don't think there's anything more we can do at this point.
> Thank you very much for any help. QT is getting awesome everyday :)
I agree, and I'm hopful there's more in store! ;)
> Fajar
>
--
-Eric 'shubes'
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
