Spoofed email and SPF

[Mark Sapiro]

On 04/29/2016 05:05 AM, Trond M. Markussen wrote:
> 
> What is the best way to block spoofed email for one particular domain?
> We have a relatively high score setting for SPF_FAIL already, but need
> to block all fails for one client/domain..


You could probably make a meta rule for SA that would give a really high
score if SPF_FAIL and from the particular domain.

You could also investigate DMARC. See
<https://www.google.com/?q=spamassassin+dmarc>, and it's first hit at
<https://blog.laussat.de/2014/05/19/using-dmarc-in-spamassassin/>.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan