Spf

[sneaky_russian]

Does anyone know of any decent SPF how to's?

I keep getting stuck with it either rejecting all emails from domains without spf records, or with nothing happening at all

I would like to use it to prevent spammers using my domain name is sending out emails

i am right in thinking SPF can do this arent i?

Cheers everyone

[sjau]

You may want to have a look at this:

http://www.openspf.org/wizard.html

[sneaky_russian]

yeah thats what i used but i just couldnt get it working

[falko]

Why do you think it isn't working? Do you have problems with it?

[sneaky_russian]

i just cant get the config right
either it rejects all emails from domains which do not have an SPF record or it does nothing at all
(mind you i was running Plesk when i tried all this)
I have now reinstalled with fedora 5 and no plesk
i have qmail running with courier imap and bind
i would like it setup so that it doesnt allow any servers (apart from my own)
to send mail using my domain name - can you also confirm that this is the right service i should be looking at??

TIA

[falko]

You must put the SPF record in your domain's zone file. You don't have to configure your mail server.

[sneaky_russian]

tried that and was still getting the problems i mentioned before

[falko]

Can you post one of your zone files where you use SPF?
Are there any errors in your mail log?

[djtremors]

You only modify your mail server if you want to check SPF protected mail coming in (block unauthorized MX senders) otherwise all your doing in the DNS is telling everyone who your mail senders for your domain is.

here is mine as an example which uses version 1 SPF and just says that only our MX records servers are the only ones who send mail out as companydomain.com.au, otherwise block the email if you get something from elsewhere.

PHP Code:

; TXT . SPF records
companydomain.com.au. IN TXT "v=spf1 a mx -all" 


for my server to check mail coming in, my /etc/postfix/master.cf has these lines.

PHP Code:

policy  unix  -       n       n       -       -       spawn
  user=nobody argv=/usr/bin/perl /usr/libexec/postfix/smtpd-policy.pl 


my main.conf has this added to the section of 'smtpd_recipient_restrictions'

PHP Code:

            check_policy_service unix:private/policy, 


and of course "/usr/libexec/postfix/smtpd-policy.pl" must be installed.

hope this clears things up a little.