Re: Local policy - disallowing +all

Jeremy Jackson wrote:
> Since implementing milter-greylist here a few weeks ago, the few spams
> that have reached my Inbox here have been from domains (presumably owned
> by or targeted by spammers) with SPF records ending in "+all"
> 
> I see there is some ability to add local policy, but it seems like it
> would need to be extended to be a general purpose filter that could be
> used to remove the "+all" when being used by milter-greylist for
> auto-whitelisting, for example.

There is a common misunderstanding that SPF "pass" somehow adds
confidence to the received message. It does not. It only asserts that
the message indeed originated from the domain it says.  The "right" way
to combine greylisting with SPF would be:

- check SPF
- if SPF status is "pass", apply greylisting on the basis of the source
domain.
- if it is anything else, apply greylisting the way you did before (on
the basis of the IP or network address).

Eugene

-------------------------------------------
-----------------------------------------------------------------------
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?member_id=6959932&id_secret=41492238-d93bcf
Powered by Listbox: http://www.listbox.com