Re: [vps-mail] SPF implimentation

[Weldon Whipple <weldon@xxxxxxxxxxx>]

On Tue, 11 May 2004, tim wrote:

> I was wondering if anyone had looked at implementing SMTP
> authentication with SPF
> http://spf.pobox.com/

I have spf-milter running on my mail server.

> on how did you go about it?

I followed the instructions posted on the http://spf.pobox.com/ site.
(They're still a bit rough around the edges, but the milter has stayed up
and seems to be working as designed.) One of these days I might find time
to document what I did and put it on technoids.org

> on VPS1, VPS2?

Not yet. (I *think* it ought to work on VPS2 about the same way as it does
on my real FreeBSD box, though.)

> any hints, it seems like a good idea, just like to hear from someone who
> has some experience wit it.

I'm still waiting to see how widespread it becomes. Personally, I think it
is a great idea. However, the architects of sendmail and postfix (and some
others) still have serious issues with SPF. (The creator of Postfix, for
example, will unsubscribe any poster to the postfix mailing list who even
mentions SPF.)

E-mail spam and viruses have become so serious that *something* has to be
done about them. It will be interesting to see where SPF (and competing
mechanisms that do similar things) are one year from now ...

It is nice to add SPF to my arsenal of clamav-milter, SpamAssassin,
procmail, sendmail dnsbl's, SMTP AUTH and the various sendmail access-db
mechanisms (hmmm... have I forgotten anything?) in the continuing fight
against SPAM. ... And I now have a significant number of entries that look
like this in my /var/log/maillog:

May 11 05:03:51 gabriel sm-mta[25564]: i4BB3oAF025564: Milter:
from=<sobetty3@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>, reject=550 5.7.1 Please see
http://spf.pobox.com/why.html?sender=sobetty3@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx&;
ip=69.1.199.144&receiver=gabriel.whipple.org: domain of sender
sobetty3@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx does not exist

Onward and upward!

Weldon

-- 
Weldon Whipple
weldon@xxxxxxxxxxx
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).