http://bugzilla.spamassassin.org/show_bug.cgi?id=3428

           Summary: Use MTA generated SPF headers if present
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules (Eval Tests)
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Where a local MTA has already performed SPF checks it seems wasteful for
SpamAssassin to run them again. Plus, as someone posted in the user mailing
list, SPF checks are skipped if the mail has passed through a trusted system. 

So where the MTA has already run SPF at SMTP time, it would be better for
SpamAssassin to score against the SPF header inserted rather than running SPF
again. Also, (and this may just be subjective as I have no actual counts) the
SPF HELLO checks seem almost worthless as many spams pass that test.

I suppose one problem may be to ensure that the SPF was run on the local or
trusted system and the spammers have not pre-inserted the header. But this
should not be too much of a problem as SPF inserts the name of the system on
which it is run and Spamassassin should be able to check that, possibly with a
configuration option to indicate 'local MTA SPF' to guard against spammers
inserting the header on systems which do not run SPF in the MTA.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to