Re: Filtering/ blocking forged emails

2009-02-08 Thread Benny Pedersen
On Sun, February 8, 2009 02:00, Matt Kettler wrote: If you don't trust yourself to make a good SPF record, put it in a DNS view of your domain that only your SA box can see, and don't export that record to the rest of the world. this can be done in postfix without dns also, go in panik dont

Re: Filtering/ blocking forged emails

2009-02-07 Thread Matus UHLAR - fantomas
On 06.02.09 16:00, Michael Scheidell wrote: (yes, I know, SPF is broken) and spammers can sign their spam with dkim, and spammers can run their own domains and put in valid spf records. No, it is not. There are other things that are broken and people blame SPF instead of them... -- Matus

Re: Filtering/ blocking forged emails

2009-02-07 Thread Matt Kettler
Michael Scheidell wrote: (yes, I know, SPF is broken) and spammers can sign their spam with dkim, and spammers can run their own domains and put in valid spf records. It's not broken, just mislabeled, and thus people try to use it for things it's not designed for. SPF isn't a

Filtering/ blocking forged emails

2009-02-06 Thread Nandini Mocherla
I am new to postfix/SpamAssassin and thinking for a way to block the email address which does not come from that domain. For example, if someone with a @xxx.com email sends to a list it must come from a server in the xxx.com domain else it should be rejected. Is it possible to do this? As

Re: Filtering/ blocking forged emails

2009-02-06 Thread Evan Platt
Am I misunderstanidng what you're saying? My domain is www.espphotography.com . But my mail is relayed through my ISP's mail server - smtp.dslextreme.com . So my mail should be rejected? At 12:52 PM 2/6/2009, you wrote: I am new to postfix/SpamAssassin and thinking for a way to block the

Re: Filtering/ blocking forged emails

2009-02-06 Thread Michael Scheidell
I am new to postfix/SpamAssassin and thinking for a way to block the email address which does not come from that domain. For example, if someone with a @xxx.com email sends to a list it must come from a server in the xxx.com domain else it should be rejected. Is it possible to do Check 'spf'

Re: Filtering/ blocking forged emails

2009-02-06 Thread Michael Scheidell
Am I misunderstanidng what you're saying? My domain is www.espphotography.com . But my mail is relayed through my ISP's mail server - smtp.dslextreme.com . So my mail should be rejected? Yes.. And mailing list email would be blocked also since it comes through: SPF_PASS=-0.001,

Re: Filtering/ blocking forged emails

2009-02-06 Thread SM
At 12:52 06-02-2009, Nandini Mocherla wrote: I am new to postfix/SpamAssassin and thinking for a way to block the email address which does not come from that domain. For example, if someone with a @xxx.com email sends to a list it must come from a server in the xxx.com domain else it should be

Re: Filtering/ blocking forged emails

2009-02-06 Thread SM
At 13:10 06-02-2009, Michael Scheidell wrote: (ps, someone has a FP on whois_contactpriv) Doesn't look like apache or espphotograpy.com or dslextreme.com It's not a false positive. There was xxx.com in the message. Regards, -sm

Re: Filtering/ blocking forged emails

2009-02-06 Thread Benny Pedersen
On Fri, February 6, 2009 22:00, Michael Scheidell wrote: (yes, I know, SPF is broken) and spammers can sign their spam with dkim, and spammers can run their own domains and put in valid spf records. life is broken also :) (recipient still need to whitelist friends) -- http://localhost/ 100%

Re: Filtering/ blocking forged emails

2009-02-06 Thread Martin Gregorie
On Fri, 2009-02-06 at 12:52 -0800, Nandini Mocherla wrote: I am new to postfix/SpamAssassin and thinking for a way to block the email address which does not come from that domain. For example, if someone with a @xxx.com email sends to a list it must come from a server in the xxx.com domain