Mailing List Archive

On Tue, 30 Nov 2004, Tom Lahti wrote:

> Are there any SPF implementations for sendmail that include fake DSN
> detection and blocking via SRS *other
> than* http://spf.pobox.com/sendmail-milter-spf-1.41.pl? I have looked and
> can't locate any...

Yes. I use Python milter: http://bmsi.com/python/milter.html

In conjunction with pysrs, it rejects fake DSNs.
In conjunction with pydns, it checks SPF.

Other (optional) policies include requiring at least one of:
1) valid PTR that is not a dynamic IP
2) valid HELO (i.e. FQN that resolves to IP)
3) valid SPF record (that doesn't FAIL)

Otherwise known as "3 strikes and your out".

It supports local SPF records to whitelist any senders that don't
pass the above and can't be bothered to even fix their HELO.

It runs in production on dozens of MTAs for business domains. The low
level milter module is also used by some ISPs for high volume (but they
don't use my milter application).

There is a mailing list.

--
Stuart D. Gathman <stuart@bmsi.com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=srs-discuss@v2.listbox.com