FYI:
Anyone interested in enabling SPF (plus MS CALLER-ID if desired) for their Postfix MTA / DbMail system? This is not intended as a recommendation but if you have considered implementing the new SPF I have been running the Postfix SMTP policy daemon with Postfix/DbMail with good result.

SPF is worth watching now as it is widely becoming the (open-source) sender policy framework of choice over TEOS, CALLER-ID and many other proposals.

SPF is an SMTP MTA policy daemon. No change to your DbMail installation is indicated but SPF certainly is a plus for your DbMail system, preventing 'junk' from entering your mail storage database. SPF relies on a DNS Zone TXT entry to indicate which MX servers are allowed to handle mail for the zone and what zones if any it handles mail for. Check your DNS. Soon everyone will be getting SPF bounces until they correctly configure their DNS servers to indicate their authorized MXs.
Try this: http://spf.pobox.com/wizard.html?mydomain=<ENTER YOUR DOMAIN> )

Mail::SPF::Query for POSTFIX 2.1/2.2 can be implemented with:
i) a simple PERL policy daemon;
ii) 2 new PERL modules (and if your PERL needs it, a sprucing up of NET:: modules) and
iii) a master.cf/main.cf config change.

Mail::SPF::Query is at:
(http://search.cpan.org/~freeside/Mail-SPF-Query-1.997/ )

(MS CALLER-ID) LMAP::CID2SPF Is at:
http://www.baschny.de/spf/LMAP-CID2SPF-0.9.tar.gz

Postfix policy daemon is here:
http://spf.pobox.com/postfix-policyd.txt

INSTALLATION:
Please read Postfix's README_FILES/SMTPD_POLICY_README

MASTER.CF
 policy  unix  -       n       n       -       -       spawn
     user=nobody argv=/usr/bin/perl /usr/libexec/postfix/smtpd-policy.pl

MAIN.CF (note that order is critical)
 smtpd_recipient_restrictions =
   ...
   reject_unknown_sender_domain,
   reject_unauth_destination,
   check_policy_service unix:private/policy,
   ...


LINKS: Postfix SMTP Policy Info
http://www.ipnet6.org/postfix/spf/    -Postfix Patch home page
http://spf.pobox.com/                          - SPF background
http://www.libspf2.org/                      - LibSPF2 site
http://www.trusted-forwarder.org/    - Global whitelist
http://www.postfix.org/                      - Postfix home page


I have no experience with these so I can't vouch for SPF on Sendmail, Qmail, Exim but overall reports are fair to excellent. See: http://www.libsrs2.org/status.html for Sendmail, Qmail, Exim - SPF help.




best to all...
Mike

-=-=-=-=-=-=-
DBMA (PERL CGI GUI DbMail Administrator)
Latest Version 2.1.1 at http://library.mobrien.com/dbmailadministrator/)

Reply via email to