On 26.01.17 19:53, David Jones wrote:
Their SPF record can really only be evaluated by the MTA during
the SMTP conversation.
From: Matus UHLAR - fantomas <uh...@fantomas.sk>
SPF records can be perfectly parser by SA or other software at
different time.
On 27.01.17 12:43, David Jones wrote:
I think you misunderstood. PTR records don't change often but
they could. Their matching A records for FCrDNS could change
too so you can't rely on later processing to know what happened
when that message arrived.
the SPF record can change too, so that makes no difference.
The best we can do here is to put sending host's fcrdns into headers,
probably together with Received-SPF: header, so spam filter will process
there.
Luckily most MTAs do the first, unless you turn off DNS check at SMTP time.
The main problem with parsing mail logs is the chicken-and-the-egg
issue where you may block a Yahoo mail server with an RBL for a
short period until you process the logs.
what informations do you search in logs that are not in mail headers?
I use MailScanner which is not a milter or otherwise directly part of the
MTA (Postfix in my setup). This basically creates 2 levels of filtering:
the MTA and MailScanner (SpamAssassin plus many other checks).
My RBLs are done by postscreen (really awesome, everyone should
use it) so I have to allow Yahoo mail servers in the first level of filtering
independent of SA.
MailScanner can still (and its SA plugin will) use the results described
above.
I get it as you need parse mail logs to find out what to put into
postscreen list, since postscreen doesn't use rdns...
and postwhite (https://github.com/stevejenkins/postwhite) script can only
parse SPF records, not logs. Luckily ita page shows something that can help
you with yahoo:
https://help.yahoo.com/kb/SLN23997.html
I think I have solved this issue. Postfix smtpd_client_restrictions
check_client_access does use FCrDNS for domains listed. I will
watch my logs for a few days and make sure this is working properly.
unluckily this is not something for postscreen...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I don't have lysdexia. The Dog wouldn't allow that.
