libSPF & sendmail
The idea of SPF (more info: http://spf.pobox.com/) for me seams to be a very good solutions against SPAM and viruses. It is not a perfect solutions, but it is very good.
James has written a library that can resolve the SPF-string. Because I am working with sendmail I had to write a patch for sendmail. Old versions of this patch are included in libspf but James does not update, so the actual patches included in libspf are outdated and do not work.
The actual patch is for the latest CVS Version of libSPF 1.0.0 and sendmail 8.13.8
To install the patch copy the patch to the directory where sendmail-8.13.8 is (usually /usr/src/). There type:
patch -p0 < libspf-1.0.0-sendmail-8.13.8.diff
Then rebuild sendmail and install sendmail again.
To reject spf-fail you have to add the two lines to your sendmail.mc:
FEATURE(`delay_checks')dnl
FEATURE(spf, 2)dnl
To reject also softfail add instead:
FEATURE(`delay_checks')dnl
FEATURE(spf, 3)dnl
To reject also softfail and neutral add instead:
FEATURE(`delay_checks')dnl
FEATURE(spf, 4)dnl
To reject also domains without SPF-entry add instead:
FEATURE(`delay_checks')dnl
FEATURE(spf, 5)dnl
recreate your sendmail.cf, install and restart sendmail
Have fun Teddy
|