Re: [Exim-users] why?
Здравствуйте, Alexander.
Вы писали 17 сентября 2012 г., 19:38:18:
1) # grep spf /usr/local/share/doc/exim/spec.txt
${lookup dnsdb{spf=example.org}}
но че-то в живую оно не работает
acl_check_mail:
warn
set acl_m_spf_record = ${lookup
dnsdb{txt=$sender_address_domain}{$value}}
set acl_m_spf_record1 = ${lookup
dnsdb{spf=$sender_address_domain}{$value}}
warn
spf = pass
logwrite = SPF for $sender_address_domain and [$sender_host_address] -
$spf_result, $acl_m_spf_record1, $acl_m_spf
_record
warn
spf = neutral
logwrite = SPF for $sender_address_domain and [$sender_host_address] -
$spf_result, $acl_m_spf_record1, $acl_m_spf
_record
warn
spf = softfail
logwrite = SPF for $sender_address_domain and [$sender_host_address] -
$spf_result, $acl_m_spf_record1, $acl_m_spf
_record
proxy# grep SPF /var/log/exim/mainlog |tail -10
2012-09-18 15:04:53 SPF for yandex.ru and [77.88.46.21] - pass, ,
mailru-verification: 530c425b1458283e\nv=spf1 redirect=_spf.yandex.ru
2012-09-18 15:05:20 SPF for usndr.com and [85.17.216.99] - pass, , v=spf1
a:mailers.usndr.com a:mailers1.usndr.com a:mailers2.usndr.com ~all
2012-09-18 15:05:39 SPF for inbox.ru and [109.87.239.16] - softfail, , v=spf1
redirect=_spf.mail.ru
2012-09-18 15:06:19 SPF for gmail.com and [202.29.184.29] - neutral, , v=spf1
redirect=_spf.google.com
2012-09-18 15:06:20 SPF for gmail.com and [118.123.141.185] - neutral, , v=spf1
redirect=_spf.google.com
2) а вот это честные дауны или наши спамеры дотянулись до зарубежных
национальных регистраторов?
proxy# grep +all /var/log/exim/mainlog
2012-09-18 14:55:28 SPF for hokshop.nl and [88.205.174.88] - pass, , v=spf1 +all
2012-09-18 14:55:39 SPF for m4d-da.com and [113.163.10.93] - pass, , v=spf1 +all
2012-09-18 14:55:47 SPF for jochies.nl and [62.42.82.96] - pass, , v=spf1 +all
2012-09-18 15:00:38 SPF for is.com.fr and [175.100.65.168] - pass, , v=spf1 +all
2012-09-18 15:01:04 SPF for mail.perfo.fr and [118.71.219.252] - pass, , v=spf1
+all
2012-09-18 15:02:07 SPF for hydro-x.co.uk and [212.156.94.26] - pass, , v=spf1
+all
2012-09-18 15:02:30 SPF for hspr.org and [78.38.31.240] - pass, , v=spf1 +all
2012-09-18 15:02:36 SPF for kaphotel.nl and [122.52.155.213] - pass, , v=spf1
+all
2012-09-18 15:03:29 SPF for infusednews.com and [183.81.97.172] - pass, ,
v=spf1 +all
2012-09-18 15:04:12 SPF for lakeshoremountainproperties.com and [58.149.131.90]
- pass, , v=spf1 +all
2012-09-18 15:07:03 SPF for kcb.nl and [116.71.2.14] - pass, , v=spf1
+all\ngoogle-site-verification=beLN56tNIwI9YdrubGwhYOJJ-79noelW8P0CAcXIK4I
2012-09-18 15:12:16 SPF for intercam.nl and [41.139.239.90] - pass, , v=spf1
+all
2012-09-18 15:12:51 SPF for logicvision.net and [116.93.45.210] - pass, ,
v=spf1 +all
хотя скорее всего это даун хостер/регистратор, сделавший темплэйт с v=spf1 +all
--
С уважением,
Alexander mailto:t...@irk.ru
___
Exim-users mailing list
Exim-users@mailground.net
http://mailground.net/mailman/listinfo/exim-users
Re: [Exim-users] why?
Есть мнение что и то и другое вместе взятое. СПФ дохлая технология для фильтрации спама. Ровно как и dkim. Tue, 18 Sep 2012 15:19:05 +0900 от Alexander Titaev t...@irk.ru: 2) а вот это честные дауны или наши спамеры дотянулись до зарубежных национальных регистраторов? proxy# grep +all /var/log/exim/mainlog 2012-09-18 14:55:28 SPF for hokshop.nl and [88.205.174.88] - pass, , v=spf1 +all 2012-09-18 14:55:39 SPF for m4d-da.com and [113.163.10.93] - pass, , v=spf1 +all 2012-09-18 14:55:47 SPF for jochies.nl and [62.42.82.96] - pass, , v=spf1 +all 2012-09-18 15:00:38 SPF for is.com.fr and [175.100.65.168] - pass, , v=spf1 +all 2012-09-18 15:01:04 SPF for mail.perfo.fr and [118.71.219.252] - pass, , v=spf1 +all 2012-09-18 15:02:07 SPF for hydro-x.co.uk and [212.156.94.26] - pass, , v=spf1 +all 2012-09-18 15:02:30 SPF for hspr.org and [78.38.31.240] - pass, , v=spf1 +all 2012-09-18 15:02:36 SPF for kaphotel.nl and [122.52.155.213] - pass, , v=spf1 +all 2012-09-18 15:03:29 SPF for infusednews.com and [183.81.97.172] - pass, , v=spf1 +all 2012-09-18 15:04:12 SPF for lakeshoremountainproperties.com and [58.149.131.90] - pass, , v=spf1 +all 2012-09-18 15:07:03 SPF for kcb.nl and [116.71.2.14] - pass, , v=spf1 +all\ngoogle-site-verification=beLN56tNIwI9YdrubGwhYOJJ-79noelW8P0CAcXIK4I 2012-09-18 15:12:16 SPF for intercam.nl and [41.139.239.90] - pass, , v=spf1 +all 2012-09-18 15:12:51 SPF for logicvision.net and [116.93.45.210] - pass, , v=spf1 +all хотя скорее всего это даун хостер/регистратор, сделавший темплэйт с v=spf1 +all -- С уважением, Alexander mailto:t...@irk.ru ___ Exim-users mailing list Exim-users@mailground.net http://mailground.net/mailman/listinfo/exim-users ___ Exim-users mailing list Exim-users@mailground.net http://mailground.net/mailman/listinfo/exim-users
Re: [Exim-users] why?
Hello!
On Mon, 17 Sep 2012 at 19:38:18 (+0900), Alexander Titaev wrote:
Здравствуйте, Exim-users.
Exim version 4.80 (FreeBSD 8.3) uid=0 gid=0 pid=51588 D=fbb95cfd
Probably Berkeley DB version 1.8x (native mode)
Support for: crypteq iconv() IPv6 use_setclassresources PAM Expand_dlfunc
OpenSSL Content_Scanning DKIM Old_Demime Experimental_SPF
acl_check_mail:
warn
set acl_m_spf_record = ${lookup
dnsdb{txt=$sender_address_domain}{$value}}
logwrite = SPF for $sender_address_domain and [$sender_host_address]
- $spf_result.
Наверное, нужно spf ACL condition заюзать (spf = ...)?
а в логах тишина
proxy# grep SPF /var/log/exim/mainlog | head -10
2012-09-17 13:37:40 SPF for lcirkutsk.ru and [192.168.100.205] - .
2012-09-17 13:38:08 SPF for qip.ru and [113.179.90.130] - .
2012-09-17 13:38:09 SPF for merr.com and [60.196.107.59] - .
2012-09-17 13:38:27 SPF for mail.ru and [94.100.176.53] - .
2012-09-17 13:39:00 SPF for fcirkutsk.ru and [192.168.100.205] - .
2012-09-17 13:39:24 SPF for merr.com and [77.126.46.149] - .
2012-09-17 13:39:29 SPF for kluch-td.ru and [94.100.176.24] - .
2012-09-17 13:39:43 SPF for merr.com and [69.199.86.174] - .
--
George L. Yermulnik
[YZ-RIPE]
___
Exim-users mailing list
Exim-users@mailground.net
http://mailground.net/mailman/listinfo/exim-users
