D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] SPAM ...

 

Martijn Grooten wrote:
> 
> Which is partly because most senders who set it don't (dare to) say:
> "these are the IP addresses of our MTAs; if you see anything
> pretending to come from us from a different address, please discard
> the email". They're much more likely to say something like "well, if
> it doesn't come from these addresses, you can't be sure". In some
> cases they just say "with email from us, you can never be sure". :-)

I used to use SPF to say email from one of our domains wouldn't
originate on servers listed in the Spamhaus ZEN block list, but this was
too complex for some SPF clients which then rejected our email because
they didn't understand the rule.

Tis a pity I figured it would deal with >90% of the spoofing for that
domain name, and any legitimate senders would have to get their IPs of
the ZEN list before they could reasonably use it.

>> However once all email can establish it's senders identity, you still have
>> to decide if this is a sender whose email you want. If your default answer
>> to that question is yes, you'll still get spam.
> 
> And I think that should be your default answer; if not, you may as
> well let your trusted contacts authenticate into your MTA. And yes,
> that does mean you'll still get spam.

Yes but it would be a lot easier to deal with ;)

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html