On Thu, 22 Apr 2010, Rejaine Monteiro wrote:

Sorry if I was not very clear (my english is a little poor)
in fact, I wanted to decrease the score obtained if SPF return OK

My point is still valid, you don't want to reduce the score on _just_ SPF Pass.

Take a look at whitelist_auth.

John Hardin escreveu:
On Thu, 22 Apr 2010, Rejaine Monteiro wrote:

It's not a good idea to whitelist on just SPF Pass. What is to prevent
a spammer from publishing valid SPF records for their sources and thus
whitelisting themselves to you?

Whitelisting on SPF Pass + specific trusted domains is reasonable, and
the place to do that is in your MTA.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  You are in a maze of twisty little protocols,
  all written by Microsoft.
----------------------------------------------------------------------
 Tomorrow: Max Planck's 152nd birthday

Reply via email to