[K12OSN] OT: just reduced spam by 95% with Free Software

[Burke Almquist]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've done the DNS links. I guess I just need to find a milter plugin  
that works in sendmail.

On Jan 31, 2007, at 10:12 AM, Vince Callaway wrote:

> On Mon, 2007-01-29 at 07:23 -0600, Burke Almquist wrote:
>> I've been using dns blacklists for a while, but I've never gotten SPF
>> checking setup. How did you set that up?
>
> There are two parts to implementing SPF.  The first is easy and  
> everyone
> should do it.  A DNS record tells the world where email from a given
> domain should originate from.  You can go to http:// 
> www.openspf.org/ for
> info an setting it up.  There is a tool to generate the txt record for
> you.
>
> The entry for my domain is simple: "v=spf1 a include:centurytel.net
> ~all"
>
> Mine shows centrytel.net as the only host mail should originate from.
> Since I'm on a dynamic IP my server uses my isp mailserver as a
> smarthost.
>
> Implementing spf checking is different for every mail system.   
> Since I'm
> using qmailtoaster ( http://www.qmailtoaster.com ) spf checking was  
> part
> of the package.  I have mine system setup for a hard reject on spf
> failure.
>
> If inbound mail is relayed through another server spf will break.   
> There
> is yet another protocol that has to be setup called SRS.  It does a
> header rewrite to show the path the mail took to get to you.  That is
> now part of qmailtoaster but I've not implemented it on my system yet.
> I am acting as a mail filter for a couple of friends who use hosting
> services with no filters.  Since their servers don't check anything  
> SRS
> has not become an issue yet.
>
> I will tell you that mailing lists break just about every checking
> protocol.  SRS would fix some of that if the list servers used it.  I
> had to setup a special entry for this list because the list server
> software hoses several anti-spam checks.
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iEYEARECAAYFAkXBDP8ACgkQfqZR3ThMfXQP5QCffZiqrokE8DgZnIonYJxfsEjU
fAMAn0yiPIswfJmdS5xRbqbwWoh+ez+L
=g4w0
-----END PGP SIGNATURE-----