Re: filter by mailserver

David Hoffman <[email protected]>
Newsgroups gmane.mail.spam.tmda.user
Message-ID <[email protected]>
Funny you should mention SpamAssassin's SPF Checks... I was thinking the same thing, but I have been having problems with my SpamAssassin doing SPF checks.

It seems that if I have SA configured to do SPF checks, EVERY SINGLE piece of mail always gets SPF_HELO_PASS from SA, no matter what the real results of the SPF test really are. I have seen forged mail come in with my Postfix SPF checker identifying it as bogus mail, but then SA still shows SPF_HELO_PASS. Postfix is now configured to automatically reject the bogus ones before SA even gets it.

But I'm confused about my SA configuration and why it's not catching it.

Anyhow, I digress. I know this is the TMDA list, not the SA list, but if anyone wants to drop hints to me with a direct reply rather than polluting the list, I'll be happy to hear them.

David



----- Original Message ----
From: Arik Raffael Funke <[email protected]>
To: [email protected]
Sent: Monday, December 4, 2006 7:38:30 PM
Subject: Re: filter by mailserver


Hi,

is that not already covered by any SPF checks? Given that you have 
defined a SP for your domain, SpamAssassin should already be taking care 
of this. Have you enabled SpamAssassin's SPF checks? If you are not 
using SA, I believe I have seen a SPF script for TMDA somewhere in the 
wiki or you could look for a stand-alone SPF checker.

Best regards,
Arik


Julie S. Lin wrote:
> Hi
> 
> what yer saying is absolutely correct, hence my desire to filter by 
> specifying a mail server
> is this possible?  i'm hopping spammers can't easily forge outgoing 
> server identity
> 
> David Hoffman wrote:
> 
>> If what you mean is that spam is getting through because the spammer 
>> forges an address that is on your whitelist, then the simple answer is 
>> don't put that address in your whitelist.
>>  
>> If you put your own address into your whitelist, or your own domain, 
>> then any spammer can forge it, and it will go through.
>>  
>> See: 
>> http://wiki.tmda.net/TmdaFaq#head-e81137818ea55d7e15d5822687715793af7062ea
>>
>>
>>  
>> ----- Original Message ----
>> From: Julie S. Lin <[email protected]>
>> To: [email protected]
>> Sent: Monday, December 4, 2006 1:14:12 PM
>> Subject: filter by mailserver
>>
>> Hi
>>
>> is there a way to filter by originating mailserver?
>>
>> the rule "from *@=domain.dom ok" still allows spam clever enough to
>> forge the from field.
>>
>> i'd like to write the filter such that mail originating from
>> "[email protected]" is OK.
>>
>> or have spammers figured out how to forge originating mail server
>> identity too?
>>
>> J
>>
>> _____________________________________________
>> tmda-users mailing list ([email protected])
>> http://tmda.net/lists/listinfo/tmda-users
>>
>>
>> ------------------------------------------------------------------------
>> Check out the all-new Yahoo! Mail beta 
>> <http://us.rd.yahoo.com/evt=43257/*http://advision.webevents.yahoo.com/mailbeta> 
>> - Fire up a more powerful email and get things done faster.
> 
> 

_____________________________________________
tmda-users mailing list ([email protected])
http://tmda.net/lists/listinfo/tmda-users


 
____________________________________________________________________________________
Yahoo! Music Unlimited
Access over 1 million songs.
http://music.yahoo.com/unlimited
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.