Bill Account Confirmation - 0270505992

[Matthew Seaman]

On 17/04/2016 10:53, Matthias Fechner wrote:
> Am 17.04.2016 um 11:30 schrieb Reko Turja:
>> liukuma.net. IN SPF "v=spf1 a mx -all"
>>
>> Just saying...
> 
> yes it seems that freebsd does not check the SPF record.
> Just saw this morning a forged mail from my domain as well:
> host -t SPF fechner.net
> fechner.net has SPF record "v=spf1 a mx a:anny.lostinspace.de -all"
> 
> Would be nice if the postmaster would add a SPF check.

There used to be a very nice integrated SPF checking facility that was
available as a set of patches to the FreeBSD postfix port (postfix being
what the FreeBSD mail system runs on), but it wasn't compatible with the
latest stable version of postfix and got dropped.  Upstream would not
accept the patches for reasons I don't entirely understand, although
there would have been some extra work to do, given this seems to me to
be a natural addition to postfix's new-ish postscreen process.

Instead to get SPF checking nowadays you need to implement either
milter-sid (which was intended primarily to support the now largely
abandoned SPFv2 stuff that Microsoft tried to introduce) or else one of
the postfix-policyd-spf implementations (you get to choose from either
perl or python there.)

	Cheers,

	Matthew




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 931 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20160417/08691bbf/attachment.sig>