problems with dkim-milter and mailscanner/postfix

[Scott Silva]

on 4-22-2008 9:56 PM Hugo van der Kooij spake the following:
> Paul Hutchings wrote:
> | I suppose it's a conversation for a different list so hope I'm not going
> | too OT here, but without getting into the wars about standard X vs
> | standard Y, is it actually worth the effort of getting DKIM working in
> | peoples opinions?
> |
> | We use SPF and obviously it doesn't stop spam but it does stop spoofing.
> |
> | DKIM/DomainKeys seems to make me a "good net citizen" but at present my
> | understanding is all it really does is authenticates?
> 
> One of the main DKIM players is yahoo. Another is google. I happen to
> get a lot of spam with valid DKIM stuff from Yahoo. Others are not keen
> on Google. So it seems to me DKIM is not adding anything except a large
> header block to each message.
> 
> Hugo.
> 
DKIM is only as valuable as SPF. It lets you know if a mail came from the 
servers it says it did. Many ISP's send lots of spam, and don't seem to try 
and stop it. Neither technology helps here. It takes a lot of processor power 
and a good set of rules to catch spam. And then if you do some post work like 
blocking persistent sources for a period of time, you get more benefits.

As for spam from Yahoo, I don't think I get much valid mail from yahoo, and I 
have thought about writing a meta rule for DKIM that cancels any score help if 
it comes from yahoo or google.
-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080423/94617f3d/signature.bin