On Tuesday 30 December 2008 12:44:09 Bijayant wrote: > Hi, > > I am a newbie so please excuse me if its a very silly question. I have been > searching the forums and Internet about my query but could not found > satisfactory answer. I am using Postfix+amavisd-new+spam-assassin on my > mail server. We get many spam mails from our own emails. Then we came to > know that SPF can prevent this. I want to implement this but do not know > how to do this. We have created the SPF records for our domains and about > to put in to DNS. > But I have a some confusion. I want to give some sa-score based on spf > check. > For this, 1) does postfix has to be also configured to support SPF or > insert some headers or spam-assassin alone can be used?
no. SPF will be checked against the last host outside your trusted path. the defaults should be perfectly fine for a simple setup were you only have one. > 2) If yes then what? > 3) If not then, How the headers will be inserted regarding SPF checks? what kind of headers are you talking about? SPF!=domainkey SPF is a very simple (read stupid) method that basicly just gives you a lost of hosts that send email for a specific domain. the required info for verification is: - who is the sender? (thats in the Sender field) - whats the SPF for the senders domain (sa will grab it iself if you didnt disable network tests) - whats the last machine that it passed through before ending in your network (thats the trusted path and the received headers inserted by your postfix. should be there by default.) > > Please suggest me how to proceed or some doc/links pointing in to right > direction. if you already know how to assemble an SPF record, you should be set. if sa doesnt score, check if you have Mail::SPF::Query installed. -- best regards Arvid Ephraim Picciani Asgaard Technologies -- The software engineer tribe.