Re: R: R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-10 Thread Matus UHLAR - fantomas
On 09.08.16 15:43, Nicola Piazzi wrote: WHITELIST_FROM_RCVD require to know mailserver name Take this example : whitelist_from_rcvd *@axkit.org sergeant.org We want to accept all domain axkit.org and we are sure that is not spoofing when it come from names that end with domain

R: [SOLVED] R: A plugin to legitimate email when SPF and DKIM missing

2016-08-10 Thread Nicola Piazzi
I usually doesnt use whitelisting so much I wrote a couple of scripts that can be put in cron They read my sql log, extract message id and create whitelist rules based on reply on your sender id Thay match 55% of incoming clean mail at now for me Download and read more here

Re: [SOLVED] R: A plugin to legitimate email when SPF and DKIM missing

2016-08-10 Thread li...@rhsoft.net
Am 10.08.2016 um 12:00 schrieb Nicola Piazzi: I wrote this simple plugin, mxpf This plugin search B class of sender Ip Address and try to match B class of any Ip of mx records of declared domain So when it match is very difficolut that sender is a spoofed domain, you can use MXPF_PASS to

[SOLVED] R: A plugin to legitimate email when SPF and DKIM missing

2016-08-10 Thread Nicola Piazzi
I wrote this simple plugin, mxpf This plugin search B class of sender Ip Address and try to match B class of any Ip of mx records of declared domain So when it match is very difficolut that sender is a spoofed domain, you can use MXPF_PASS to combine with other rules in addition to SPF_PASS 1)

Re: R: R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Kevin Golding
On Tue, 09 Aug 2016 16:43:50 +0100, Nicola Piazzi wrote: WHITELIST_FROM_RCVD require to know mailserver name Take this example : whitelist_from_rcvd *@axkit.org sergeant.org We want to accept all domain axkit.org and we are sure that is not spoofing

R: R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Nicola Piazzi
WHITELIST_FROM_RCVD require to know mailserver name Take this example : whitelist_from_rcvd *@axkit.org sergeant.org We want to accept all domain axkit.org and we are sure that is not spoofing when it come from names that end with domain sergeant.org But if I have only email address I

Re: R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread RW
On Tue, 9 Aug 2016 15:19:08 + Nicola Piazzi top-posted: > I dont know if you want to find a solution of if you want to say why > i am searching one. Reason is this : > I have SPF_PASS, a variable that tell me that who send is proprietary > of that domain I KNOW PERFECTLY THAT SOMEONE CAN TELL

R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Nicola Piazzi
I dont know if you want to find a solution of if you want to say why i am searching one. Reason is this : I have SPF_PASS, a variable that tell me that who send is proprietary of that domain I KNOW PERFECTLY THAT SOMEONE CAN TELL SPAM WITH A PURCHASED REGULAR NON SPOOFED DOMAIN But I can

Re: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Merijn van den Kroonenberg
> On Tue, 9 Aug 2016 08:45:54 + > Nicola Piazzi wrote: > >> whitelist_from_rcvd is intended to legitimate a single somain, >> specifiing domain by domain >> >> I need something that tell me that check all incoming email and say >> if the originating ip (or class c) is the same of mx record >>

Re: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread RW
On Tue, 9 Aug 2016 08:45:54 + Nicola Piazzi wrote: > whitelist_from_rcvd is intended to legitimate a single somain, > specifiing domain by domain > > I need something that tell me that check all incoming email and say > if the originating ip (or class c) is the same of mx record > > This

Re: R: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Axb
Please keep list mail on the list. Direct replies unless stated as OFFLIST are not welcome. On 08/09/2016 10:51 AM, Nicola Piazzi wrote: Hi, I dont want to specify some names I need a rule that tell me if an email was sent using the same ip of the domain mx record So I am sure that the email

Re: R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Axb
FTR: you can also do whitelist_from_rcvd *@* gruppocomet.it or whitelist_from_rcvd *@*.it gruppocomet.it or variations of... On 08/09/2016 10:45 AM, Nicola Piazzi wrote: whitelist_from_rcvd is intended to legitimate a single somain, specifiing domain by domain I need something that tell me

R: A plugin to legitimate email when SPF and DKIM missing

2016-08-09 Thread Nicola Piazzi
whitelist_from_rcvd is intended to legitimate a single somain, specifiing domain by domain I need something that tell me that check all incoming email and say if the originating ip (or class c) is the same of mx record This can be intended like an SPF_PASS when people doesn t set spf at all.