On Wed, 5 Oct 2011 11:01:12 -1000, Julian Yap wrote:
Ive noticed some trojans with addresses from usps.com [1] slip
through.

ups.com ?

Does anyone blacklist based on SPF?

not needed since all spf domains is blacklisted, and scored neotral in spamassassin, until you use whitelist_from_spf or def_whitelist_from_spf sender email, and it will only gives neative score if its passing

also remember From: is not envelope sender, does spf use that header in your test ?

if it does then your spf test is brokken

have you set envelope_sender_header in local.cf ?

perldoc Mail::SpamAssassin::Conf

I took a look at the source for SpamAssassin/Plugin/SPF.pm but it only
has evaluation rules for whitelisting:
   $self->register_eval_rule ("check_for_spf_whitelist_from");
  $self->register_eval_rule ("check_for_def_spf_whitelist_from");

its not needed to have blacklist

Reply via email to