Re: v=spf1 +all

2015-04-24 Thread Benny Pedersen
A. Schulze skrev den 2015-04-23 19:24: I wrote a little patch for the SPF plugin to detect domains authenticating any IP by SPF. thanks for update, nice work Unfortunately I found also domains not really sending spam use +all ยน) Any comments? in spamassassin +all will not inhirit

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 13:13:12 +0200 Benny Pedersen m...@junc.eu wrote: thanks for update, nice work Yes. I wonder how long until spammers use: v=spf1 ip4:0.0.0.0/1 ip4:128.0.0.0/1 -all or even: v=spf1 exists:gmail.com -all Unfortunately, the SPF spec makes it tricky to chase down all

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 15:55:50 +0200 Reindl Harald h.rei...@thelounge.net wrote: and how does that care a SA setup? It probably doesn't seriously affect a default SA setup, but I have quite a few customers who (despite my warnings) knock off a couple of points on SPF pass for any domain. Also,

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 15:13 schrieb Dianne Skoll: On Fri, 24 Apr 2015 13:13:12 +0200 Benny Pedersen m...@junc.eu wrote: thanks for update, nice work Yes. I wonder how long until spammers use: v=spf1 ip4:0.0.0.0/1 ip4:128.0.0.0/1 -all or even: v=spf1 exists:gmail.com -all makes no sense -

Re: v=spf1 +all

2015-04-24 Thread Joe Quinn
On 4/24/2015 9:38 AM, Reindl Harald wrote: Am 24.04.2015 um 15:22 schrieb Dianne Skoll: On Fri, 24 Apr 2015 15:17:45 +0200 Reindl Harald h.rei...@thelounge.net wrote: v=spf1 exists:gmail.com -all makes no sense - the spammer don't own the domain in most cases and if they do then they just

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 15:17:45 +0200 Reindl Harald h.rei...@thelounge.net wrote: v=spf1 exists:gmail.com -all makes no sense - the spammer don't own the domain in most cases and if they do then they just don't add a SPF policy to use it with infected clients Spammers often register and use

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 15:22 schrieb Dianne Skoll: On Fri, 24 Apr 2015 15:17:45 +0200 Reindl Harald h.rei...@thelounge.net wrote: v=spf1 exists:gmail.com -all makes no sense - the spammer don't own the domain in most cases and if they do then they just don't add a SPF policy to use it with

Re: v=spf1 +all

2015-04-24 Thread RW
On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald wrote: Am 24.04.2015 um 15:22 schrieb Dianne Skoll: Spammers often register and use throwaway domains. And check how the exists: mechanism works well, and how becomes SPF part of the game in case of a throw-away domain as long as

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 15:50 schrieb Dianne Skoll: On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald h.rei...@thelounge.net wrote: well, and how becomes SPF part of the game in case of a throw-away domain as long as score SPF_NONE 0 - why in the world should a spammer add a TXT record to a

Re: v=spf1 +all

2015-04-24 Thread Matus UHLAR - fantomas
On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald h.rei...@thelounge.net wrote: well, and how becomes SPF part of the game in case of a throw-away domain as long as score SPF_NONE 0 - why in the world should a spammer add a TXT record to a throw-away domain? Am 24.04.2015 um 15:50 schrieb

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald h.rei...@thelounge.net wrote: well, and how becomes SPF part of the game in case of a throw-away domain as long as score SPF_NONE 0 - why in the world should a spammer add a TXT record to a throw-away domain? Ummm are you really that

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 16:11 schrieb Matus UHLAR - fantomas: On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald h.rei...@thelounge.net wrote: well, and how becomes SPF part of the game in case of a throw-away domain as long as score SPF_NONE 0 - why in the world should a spammer add a TXT record to a

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 17:03:11 +0200 Reindl Harald h.rei...@thelounge.net wrote: besides that i am responsible for a single domain with currently 12000 users and the usernumber don't matter because it don't say anything about your insight it's pointless what spammers do and don't do OK. You

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 16:40:07 +0200 Reindl Harald h.rei...@thelounge.net wrote: WTF read the thread and context - i just statet I wonder how long until spammers use: v=spf1 ip4:0.0.0.0/1 ip4:128.0.0.0/1 -all makes no sense for spammers, not more and not less It makes plenty of sense. We

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 16:53 schrieb Dianne Skoll: On Fri, 24 Apr 2015 16:40:07 +0200 Reindl Harald h.rei...@thelounge.net wrote: WTF read the thread and context - i just statet I wonder how long until spammers use: v=spf1 ip4:0.0.0.0/1 ip4:128.0.0.0/1 -all makes no sense for spammers, not more and

Re: v=spf1 +all

2015-04-24 Thread Paul Stead
On 24/04/15 14:13, Dianne Skoll wrote: On Fri, 24 Apr 2015 13:13:12 +0200 Benny Pedersen m...@junc.eu wrote: thanks for update, nice work Yes. I wonder how long until spammers use: v=spf1 ip4:0.0.0.0/1 ip4:128.0.0.0/1 -all or even: v=spf1 exists:gmail.com -all I've had thoughts of an

Re: v=spf1 +all

2015-04-24 Thread Matus UHLAR - fantomas
Am 24.04.2015 um 16:11 schrieb Matus UHLAR - fantomas: SA setup will detect such domains and will score mail positively. Is there something other to explain? On 24.04.15 16:16, Reindl Harald wrote: i don't really and everybody who pretends the opposite should be quiet in the future when it

Re: v=spf1 +all

2015-04-24 Thread Dianne Skoll
On Fri, 24 Apr 2015 16:20:41 +0100 Paul Stead paul.st...@zeninternet.co.uk wrote: I've had thoughts of an extension which calculates the number of IP addresses specified in an SPF record, then calculating the % of world-wide addresses this SPF declares... I don't seem to be able to bend the

Re: v=spf1 +all

2015-04-24 Thread Reindl Harald
Am 24.04.2015 um 16:35 schrieb Matus UHLAR - fantomas: Am 24.04.2015 um 16:11 schrieb Matus UHLAR - fantomas: SA setup will detect such domains and will score mail positively. Is there something other to explain? On 24.04.15 16:16, Reindl Harald wrote: i don't really and everybody who

Re: v=spf1 +all

2015-04-24 Thread Joe Quinn
On 4/24/2015 11:23 AM, Dianne Skoll wrote: On Fri, 24 Apr 2015 16:20:41 +0100 Paul Stead paul.st...@zeninternet.co.uk wrote: I've had thoughts of an extension which calculates the number of IP addresses specified in an SPF record, then calculating the % of world-wide addresses this SPF

Re: v=spf1 +all

2015-04-23 Thread Reindl Harald
Am 23.04.2015 um 19:24 schrieb A. Schulze: Hello, I wrote a little patch for the SPF plugin to detect domains authenticating any IP by SPF. Usage: local.cf header SPF_PASS_PLUSALL eval:check_for_spf_pass_plusall() header SPF_HELO_PASS_PLUSALL eval:check_for_spf_helo_pass_plusall()

v=spf1 +all

2015-04-23 Thread A. Schulze
Hello, I wrote a little patch for the SPF plugin to detect domains authenticating any IP by SPF. Usage: local.cf header SPF_PASS_PLUSALL eval:check_for_spf_pass_plusall() header SPF_HELO_PASS_PLUSALL eval:check_for_spf_helo_pass_plusall() describe