5 Jul
2004
5 Jul
'04
2:53 p.m.
I am checking the excellent news site www.theregister.co.uk almost every
day. Today I saw this interesting news article:
http://www.theregister.co.uk/2004/07/05/sender_authentication
Now, what a coincidence! This article matches our recent discussion!
The funny thing: It's probably coming sooner that even I expected in my
wildest dreams ;-) Microsoft will also play an important role.
Here is an extract of the article
<extract>
Sender ID is expected to be relatively simple to deploy, requiring
little ongoing maintenance. In essence, all you need to do is publish
the IP addresses of approved outgoing email MTAs in your domain name
records. When your users send email, the recipient can make sure the
mail is coming from authorized IP addresses by checking the DNS for the
domain in the "From:" field.
</extract>
Greetings, Patrick Kaell
5 Jul
5 Jul
3:27 p.m.
Hi Patrick,
[btw - I agree with your previous mail]
On Mon, 5 Jul 2004, Patrick Kaell wrote:
I am checking the excellent news site
www.theregister.co.uk almost every
day. Today I saw this interesting news article:
http://www.theregister.co.uk/2004/07/05/sender_authentication
Now, what a coincidence! This article matches our recent discussion!
ic, the SPF thing.
Apropos, check the list mail's headers - you'll find that apparently
our LiLux overloards (i.e. whoever configures the mailserver on
sendar) has already set SPF up: there are "Received-SPF" headers...
The funny thing: It's probably coming sooner that
even I expected in my
wildest dreams ;-) Microsoft will also play an important role.
Here is an extract of the article
<extract>
Sender ID is expected to be relatively simple to deploy, requiring
little ongoing maintenance. In essence, all you need to do is publish
the IP addresses of approved outgoing email MTAs in your domain name
records. When your users send email, the recipient can make sure the
mail is coming from authorized IP addresses by checking the DNS for the
domain in the "From:" field.
</extract>
I'll have to read up (as time permits) on SPF details... or else maybe
someone who already did might do a presentation @ a LiLux meeting?
Apropos presentation, we already talked about antispam setups...
that would be interesting - if someone feels like it...
While I'm at it, does anyone have a good link on how to set up
postfix with SpamAssassin (and amavisd), with potentially different
rules for different domains? I've done some RTFM, but there's so
much of that... somehow I didn't yet hit upon what I'm looking for.
Greets Eric
4:33 p.m.
Eric Dondelinger wrote:
ic, the SPF thing.
Apropos, check the list mail's headers - you'll find that apparently
our LiLux overloards (i.e. whoever configures the mailserver on
sendar) has already set SPF up: there are "Received-SPF" headers...
Thanks for the hint. I checked now the headers. It seems that the Lilux
administrators are ahead of their time ;-)
The domains used by most of us do not designate permitted sender hosts
yet. So it does not have an effect at the moment.
It is not clear how restrictive it will be in the future. The article
mentions that it will just increase the probability that the mail will
be classified as spam (ie the mail will not be blocked).
Worms which send right material written in german under my name just
suck so much! Even more annoying than blocking ports ;-)
Greetings, Patrick Kaell
7437
days inactive
7437
days old
2 comments
2 participants
participants (2)
-
Eric Dondelinger -
Patrick Kaell