User Tools

Site Tools


exim4:validating_spf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
exim4:validating_spf [2016/11/30 10:56] peterexim4:validating_spf [2020/07/15 09:30] (current) – external edit 127.0.0.1
Line 10: Line 10:
  
 <WRAP notice> <WRAP notice>
-This needs the exim4-daemon-heavy package installed, and not the light variants of exim.+**NOTE**:  This needs the exim4-daemon-heavy package installed, and not the light variants of exim.
 </WRAP> </WRAP>
  
Line 93: Line 93:
   * **7** = error on parsing SPF record(s); functionally equivalent to 5   * **7** = error on parsing SPF record(s); functionally equivalent to 5
  
-Now what's really interesting from the practical point of view is the third option, which requires the -all flag to be set in SPF rule.  Not many domains have this in fact.  +Now what's really interesting from the practical point of view is the third option, which requires the **-all** flag to be set in SPF rule.  Not many domains have this in fact.  
  
 <WRAP caution> <WRAP caution>
-Having analysed many logs to check how effecient this is in stopping spam, shows that SPF is unfortunately very inefficient way to filter incoming mail, even for botnet spam which is rather simple to filter out by other means.  It will never work for professional corporate spammers sending targeted messages to dozens of valid addresses at a time.+**CAUTION**:  Having analysed many logs to check how effecient this is in stopping spam, shows that SPF is unfortunately very inefficient way to filter incoming mail, even for botnet spam which is rather simple to filter out by other means.  It will never work for professional corporate spammers sending targeted messages to dozens of valid addresses at a time.
  
 Due to bad design of the protocol each SPF query may require several DNS queries (the spfquery tool has default limit of 10).  On busy servers that's a lot.  Server receiving 10 mails per second may potentially generate 50-100 additional DNS queries per second. Due to bad design of the protocol each SPF query may require several DNS queries (the spfquery tool has default limit of 10).  On busy servers that's a lot.  Server receiving 10 mails per second may potentially generate 50-100 additional DNS queries per second.
exim4/validating_spf.1480503367.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki