[prev in list] [next in list] [prev in thread] [next in thread]
List: opensmtpd-misc
Subject: Re: Should we use DKIM and SPF?
From: "Barbier, Jason" <jabarb () serversave ! us>
Date: 2014-04-26 16:17:12
Message-ID: CAFTNjvG-uzWQWgoN7cd29Op9jfSMKwc7vKP5rKn6Bzn2HfJ=2A () mail ! gmail ! com
[Download RAW message or body]
there isnt a single one, but you have to do it somthing similar to what
gilles did for dkim dkim.
so you chose somthing like in my case I use amavisd since I never got
spampd to work reliably listening on port 2000
listen on lo port 2001 tag clean
accept tagged clean for deliver to mbox
accept for domain contoso.tld relay via "smtp://127.0.0.1:2000"
Im doing that part from memory but that is the essence of it, the first run
of the message it kicks out to amavisd, which runs it through spamassassin
then back into smtpd which tags it as clean which gets picked up by the
rule that takes tagged messages and delivers them.
On Sat, Apr 26, 2014 at 9:10 AM, Stéphane Guedon <stephane@22decembre.eu>wrote:
> Le samedi 26 avril 2014 07:51:42, vous avez écrit :
> > you want to use SPF at the very least, but then back it
> > with spampd or amavisd and run it though spamassassin
> > that is pretty much a standard stack right there,
>
> I tried to set it up yesterday.
> Complete failed !
>
> I would really like to have spamassassin cause it has a lot of
> features that may be useful :
>
> check FROM address in an address book
> check gpg sig
>
> obviously, I looked if spamd can look in a mail adress list. It can't
> !
>
> Do you know some doc explaining how I can integrate spamassassin in
> opensmtpd ?
>
> >
> > On Sat, Apr 26, 2014 at 7:26 AM, Stéphane Guedon
> <stephane@22decembre.eu>wrote:
> > > Le samedi 26 avril 2014 07:20:19, vous avez écrit :
> > > > Hi John,
> > > >
> > > > At 06:04 26-04-2014, John Cox wrote:
> > > > >Unfortunately the whole point of SPF (unlike Sender-ID which
> > > > >works
> > > > >much better and on much the same principles) is that you can
> > > > >reject
> > > > >the message before receiving it so you wouldn't have the DKIM
> > > > >stuff
> > > > >(which I think requires you to have the entire message?).
> > > >
> > > > SPF allows processing using envelope information. DKIM
> > > > processing
> > > > can only occur after the entire message has been received.
> > > >
> > > > Regards,
> > > > -sm
> > >
> > > I am myself in need for a good antispam solution with opensmtpd.
> > >
> > > if dkim (which I don't use yet) and spf are not really working,
> > > what's the good way (I am already using spamd, not enough !)
>
--
Jason Barbier | jabarb@serversave.us
Pro Patria Vigilans
[Attachment #3 (text/html)]
<div dir="ltr">there isnt a single one, but you have to do it somthing similar to \
what gilles did for dkim dkim.<br>so you chose somthing like in my case I use amavisd \
since I never got spampd to work reliably listening on port 2000<br> <br>listen on lo \
port 2001 tag clean<div>accept tagged clean for deliver to mbox<br>accept for domain \
contoso.tld relay via "smtp://<a \
href="http://127.0.0.1:2000">127.0.0.1:2000</a>"</div><div><br></div><div>Im \
doing that part from memory but that is the essence of it, the first run of the \
message it kicks out to amavisd, which runs it through spamassassin then back into \
smtpd which tags it as clean which gets picked up by the rule that takes tagged \
messages and delivers them.</div> </div><div class="gmail_extra"><br><br><div \
class="gmail_quote">On Sat, Apr 26, 2014 at 9:10 AM, Stéphane Guedon <span \
dir="ltr"><<a href="mailto:stephane@22decembre.eu" \
target="_blank">stephane@22decembre.eu</a>></span> wrote:<br> <blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex">Le samedi 26 avril 2014 07:51:42, vous avez écrit :<br> <div \
class="">> you want to use SPF at the very least, but then back it<br> > with \
spampd or amavisd and run it though spamassassin<br> > that is pretty much a \
standard stack right there,<br> <br>
</div>I tried to set it up yesterday.<br>
Complete failed !<br>
<br>
I would really like to have spamassassin cause it has a lot of<br>
features that may be useful :<br>
<br>
check FROM address in an address book<br>
check gpg sig<br>
<br>
obviously, I looked if spamd can look in a mail adress list. It can't<br>
!<br>
<br>
Do you know some doc explaining how I can integrate spamassassin in<br>
opensmtpd ?<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
> On Sat, Apr 26, 2014 at 7:26 AM, Stéphane Guedon<br>
<<a href="mailto:stephane@22decembre.eu">stephane@22decembre.eu</a>>wrote:<br>
> > Le samedi 26 avril 2014 07:20:19, vous avez écrit :<br>
> > > Hi John,<br>
> > ><br>
> > > At 06:04 26-04-2014, John Cox wrote:<br>
> > > >Unfortunately the whole point of SPF (unlike Sender-ID which<br>
> > > >works<br>
> > > >much better and on much the same principles) is that you can<br>
> > > >reject<br>
> > > >the message before receiving it so you wouldn't have the \
DKIM<br> > > > >stuff<br>
> > > >(which I think requires you to have the entire message?).<br>
> > ><br>
> > > SPF allows processing using envelope information. DKIM<br>
> > > processing<br>
> > > can only occur after the entire message has been received.<br>
> > ><br>
> > > Regards,<br>
> > > -sm<br>
> ><br>
> > I am myself in need for a good antispam solution with opensmtpd.<br>
> ><br>
> > if dkim (which I don't use yet) and spf are not really working,<br>
> > what's the good way (I am already using spamd, not enough !)<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div \
dir="ltr"><div>Jason Barbier | <a href="mailto:jabarb@serversave.us" \
target="_blank">jabarb@serversave.us</a></div><div>Pro Patria Vigilans</div> </div>
</div>
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscribe@opensmtpd.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic