SPF Rules?

[Johnny Stork]

Also, would adding a "trusted_networks" setting, address this message from the SA lint test?

[18569] dbg: spf: no trusted relays found, using first (untrusted) relay (if present) for SPF checks
     0.00078
    

    
     [18569] dbg: spf: no suitable relay for spf use found, skipping SPF-helo check
_______________________________

 Johnny Stork

 Information & Technology Manager
 Provincial Blood Coordinating Office
 604-806-8840

 

 


----- Original Message -----
From: mailscanner-bounces at lists.mailscanner.info on behalf of Johnny Stork 
Sent: Tue, 4/4/2006 2:37pm
To: MailScanner discussion 
Subject: RE:  SPF Rules?

Should the suggestions below (from the SA wiki) go into the /etc/MailScanner/spam.assassin.prefs.conf file, or elsewhere?


If you want to configure SpamAssassin with more information, you can: 

 set 'internal_networks' to include the hosts that act as MX for
your domains, or that may deliver mail internally in your organisation.


 set 'trusted_networks' to include the same hosts and networks
as 'internal_networks', with the addition of some hosts that are
external to your organisation which you trust to not be under the
control of spammers. For example, very high-volume mail relays at other
ISPs, or mailing list servers. 


_______________________________

 Johnny Stork

 Information & Technology Manager
 Provincial Blood Coordinating Office
 604-806-8840

 

 


----- Original Message -----
From: mailscanner-bounces at lists.mailscanner.info on behalf of Matt Kettler 
Sent: Tue, 4/4/2006 2:12pm
To: MailScanner discussion 
Subject: Re: SPF Rules?

Johnny Stork wrote:
> I finally got around to upgrading our MailScanner setup running on
> RHES4, I first used the tarball for the clam/SA packages and then the
> MailScanner rpm upgrade tarball. All seems fine and I am now trying to
> go through and address various issues that I have not fully configured
> yet. For now I am trying to understand how the SPF rules work. I know
> very little about SPF or how it is implemented in mailscanner, but it
> seems that almost all messages trigger this rule below? Is this normal
> 
> Score   Rule                                   Description
> 2.08    SPF_HELO_SOFTFAIL    SPF: HELO does not match SPF record (softfail)
> 
No, it's not normal.

However, this is NOT a MailScanner issue. It's a SpamAssassin issue, as that's a
SpamAssassin rule.

My guess is that you've got a broken trust path, and SA is confused about which
host is dropping off the mail to your network.

http://wiki.apache.org/spamassassin/TrustPath

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!