DoNoSpoofing is working well and is an easy to configure check.
To do what you want, disable DoNoSpoofing and configure SPF, possibly
SPFoverride for the local domains.
Thomas
Von: "[email protected] " <[email protected]>
An: ASSP development mailing list <[email protected]>,
Datum: 26.10.2013 02:55
Betreff: [Assp-test] suggestion about DoNoSpoofing mechanism
Block Local Addresses from External Sender Alltogether (DoNoSpoofing,
default=score)
is a nice option with posiblility of scanning From header. However if
you run system where users can "park" (add) any domain to the you
server (this) configuration it is possible that someone will add on
purpose some exteral domain just to block senders at this domain from
reaching mailboxes at your server... (thats why at MTA I run
delivieres by dns rather than list of localdomains)
It would be far better to check IP under first/any mx record at sender
domain and compare it to list of your servers IPs (as specified by
assp admin) and only do this blocking if this test fails... Of course
this is additional dns traffic even if you use dns cacheing - assp
might want to implement caching here on its own...
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most
from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
