Re: SPF_HELO_PASS,SPF_NONE

[Reindl Harald]

Am 06.01.2015 um 00:06 schrieb RW:

On Mon, 05 Jan 2015 22:58:55 +0100
Reindl Harald wrote:

Am 05.01.2015 um 22:54 schrieb Benny Pedersen:

Reindl Harald skrev den 2015-01-05 18:52:

how can "SPF_HELO_PASS,SPF_NONE" fire both?

the above is 2 diff tests

i know that by myself *but* if the sending domain does not publish
any SPF policy then there should be no positive score for
"SPF_HELO_PASS"

It doesn't have a positive score:

score SPF_HELO_PASS -0.001

if the envelope domain don't push a SPF policy *only* NO_SPF should hit

however, fixed that in "local.cf"

meta __SPF_FULL_PASS 0
meta __SPF_RANDOM_SENDER 0
score SPF_HELO_PASS 0
score SPF_HELO_FAIL 0
score SPF_HELO_SOFTFAIL 0
score SPF_NONE 0.05
score SPF_PASS -0.05
score SPF_SOFTFAIL 1.5
score SPF_FAIL 2.5

that is a positive score in context of "less spam probability" just because somebody sends a HELO command - frankly all day long zombies send HELO commands of known domains up to fake PTR's

signature.asc
Description: OpenPGP digital signature