|
From: Michael S. <Mic...@lr...> - 2007-03-19 12:16:10
|
On Sun, 18 Mar 2007, Dan Faerch wrote: > I know Lionel hates SPF, but would it be an idea to add SPF > functionality to the whitelist process? > > Ie. instead of *.google.com do "SPF:google.com" and have sqlgrey do all > the lookups? > Since it is illegal in Denmark (where i live) to send mail to anyone who > didnt request it (read spam), it would be cool for me to be able to add > "SPF:*.dk". > > Any ideas or comments anyone? > Hi Dan, I'm using SPF as part of Sqlgrey since long. I use it to transfer entries from from_awl to domain_awl. Every 5 minutes a cronjob inspects all newly created entries in from_awl if one of the following conditions hold: * the SPF-record declares this IP as authoritative for the sending domain * the sending MTA is responsible for the sender domain, that means a MX records exist for the sender domain and points to this MTA (no check for reachability is done) * the sender domain is a host domain and the sending MTA sends emails for this domain (only). >From 19.250 entries in domain_awl, 48% came in via group domain, 0,75% via A-Record check, 32% via MX-record check and 19% via SPF-Record check. This fits perfectly into the design of Sqlgrey, because a SPF record is always associated with a domain, therefore the result belongs into domain_awl, not the whitelist. Michael Storz -- ====================================================== Leibniz-Rechenzentrum | <mailto:St...@lr...> Boltzmannstr. 1 | Fax: +49 89 35831-9700 85748 Garching / Germany | Tel: +49 89 35831-8840 ====================================================== |