sa's SPF plugin suggestion

[arni <ma...@arni.name>]

Hi list,

i just brought this up in the irc channel and at first it looks really 
simple to do - but looking at it it seems rather complicated.
Since SPF isnt widely spread in domain's TXT records its use isnt 
exactly high ether.

I want to allow the spamassassin admin to set a default SPF record to 
use when no real record is available, im my case i'd like to use "v=spf1 
+mx +a ?all" to give a little negative score on mails that are sent from 
domains that are vaguely related to the email address.

I've looked into sa's SPF plugin but to me (i'm not a perl person) it 
looks like it doesnt even see the raw record which would allow 
modification but leaves it all up to a Mail::SPF object.

Any suggestions on how i could archieve this?

thanks, arni

Re: sa's SPF plugin suggestion

[Theo Van Dinter <fe...@apache.org>]

On Sat, Jun 16, 2007 at 12:27:44AM +0200, arni wrote:
> I've looked into sa's SPF plugin but to me (i'm not a perl person) it 
> looks like it doesnt even see the raw record which would allow 
> modification but leaves it all up to a Mail::SPF object.
> 
> Any suggestions on how i could archieve this?

FWIW, I responded on the IRC channel after this mail went out...
Since Mail::SPF is doing the DNS work, there's likely nothing we can do
in the plugin to override the SPF mandated default record.  I say likely
since I haven't fully looked at the API, but there's nothing obvious in
the quick look around that I did.

For example, looking at the Mail::SPF/spfquery code, there will apparently
be a point where it will be possible to pass in stuff like "default",
but it's not available right now: "which require the yet unreleased
Mail::SPF::BlackMagic module".

-- 
Randomly Selected Tagline:
It isn't stolen... It's creatively re-systhesized!

Re: sa's SPF plugin suggestion

[arni <ma...@arni.name>]

Daryl C. W. O'Shea schrieb:
> I don't really see what the point to it is.  An SPF_PASS or 
> SPF_NEUTRAL gets you nothing score wise.  Perhaps you want to use it 
> for whitelisting?
>
> Daryl
>

I've rescored SPF_PASS to -1.5 and SPF_HELO_PASS to -0.5

For my spam this seems to be a safe behaviour as it only hits ham for me.

arni

Re: sa's SPF plugin suggestion

[Dave Brondsema <da...@brondsema.net>]

Daryl C. W. O'Shea wrote:
> arni wrote:
> 
>> I want to allow the spamassassin admin to set a default SPF record to
>> use when no real record is available, im my case i'd like to use
>> "v=spf1 +mx +a ?all" to give a little negative score on mails that are
>> sent from domains that are vaguely related to the email address.
> 
> I don't really see what the point to it is.  An SPF_PASS or SPF_NEUTRAL
> gets you nothing score wise.  Perhaps you want to use it for whitelisting?
> 

I would like to have a feature like this, also.  And yes, my use-case
would be for whitelisting.

-- 
Dave Brondsema : dave@brondsema.net
http://www.brondsema.net : personal
http://www.splike.com : programming
               <><

Re: sa's SPF plugin suggestion

["Daryl C. W. O'Shea" <sp...@dostech.ca>]

arni wrote:

> I want to allow the spamassassin admin to set a default SPF record to 
> use when no real record is available, im my case i'd like to use "v=spf1 
> +mx +a ?all" to give a little negative score on mails that are sent from 
> domains that are vaguely related to the email address.

I don't really see what the point to it is.  An SPF_PASS or SPF_NEUTRAL 
gets you nothing score wise.  Perhaps you want to use it for whitelisting?

Daryl