Am 12.02.2015 23:44, schrieb Benny Pedersen:
On 12. feb. 2015 22.25.10 Alex Regan <mysqlstud...@gmail.com> wrote:
http://pastebin.com/C0YTr3Wn
I've added the IP range and sender to local blocklists. Can you
suggest
any other possibilities for blocking these?
meta DKIM_ADSP_ALL (3) (3) (3) (3)
simple and neat imho
ADSP still works on some domains, but it's deprecated (demoted to
historic in November 2013).
You can easily check DMARC compliance with a recent SVN Version of
SpamAssassin:
------- 8< --------
ifplugin Mail::SpamAssassin::Plugin::AskDNS
askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1
(?=\s*;) .* ;\s* p\s*=\s*none \s*(?:;|\z)/x
askdns __DMARC_POLICY_QUAR _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1
(?=\s*;) .* ;\s* p\s*=\s*quarantine \s*(?:;|\z)/x
askdns __DMARC_POLICY_REJECT _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1
(?=\s*;) .* ;\s* p\s*=\s*reject \s*(?:;|\z)/x
meta DMARC_FAIL_REJECT !(DKIM_VALID_AU || SPF_PASS) &&
__DMARC_POLICY_REJECT
describe DMARC_FAIL_REJECT DMARC validation failed and policy is to
reject
score DMARC_FAIL_REJECT 9.0
meta DMARC_FAIL_QUAR !(DKIM_VALID_AU || SPF_PASS) &&
__DMARC_POLICY_QUAR
describe DMARC_FAIL_QUAR DMARC validation failed and policy is
quarantine
score DMARC_FAIL_QUAR 6.0
meta DMARC_FAIL_NONE !(DKIM_VALID_AU || SPF_PASS) &&
__DMARC_POLICY_NONE
describe DMARC_FAIL_NONE DMARC validation failed and policy is none
score DMARC_FAIL_NONE 1.2
meta DMARC_PASS_REJECT DKIM_VALID_AU && SPF_PASS &&
__DMARC_POLICY_REJECT
describe DMARC_PASS_REJECT DMARC validation passed and policy is to
reject
tflags DMARC_PASS_REJECT nice
score DMARC_PASS_REJECT -1.2
meta DMARC_PASS_QUAR DKIM_VALID_AU && SPF_PASS &&
__DMARC_POLICY_QUAR
describe DMARC_PASS_QUAR DMARC validation passed and policy is
quarantine
tflags DMARC_PASS_QUAR nice
score DMARC_PASS_QUAR -1.0
meta DMARC_PASS_NONE DKIM_VALID_AU && SPF_PASS &&
__DMARC_POLICY_NONE
describe DMARC_PASS_NONE DMARC validation passed and policy is none
tflags DMARC_PASS_NONE nice
score DMARC_PASS_NONE -0.6
endif
------- 8< --------
Please adjust scores to fit your setup.
--
Christian Laußat
https://blog.laussat.de
