spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reindl Harald <h.rei...@thelounge.net>
Subject Re: v=spf1 +all
Date Fri, 24 Apr 2015 14:16:08 GMT

Am 24.04.2015 um 16:11 schrieb Matus UHLAR - fantomas:
>>> On Fri, 24 Apr 2015 15:38:15 +0200
>>> Reindl Harald <h.reindl@thelounge.net> wrote:
>>>> well, and how becomes SPF part of the game in case of a throw-away
>>>> domain as long as "score SPF_NONE 0" - why in the world should a
>>>> spammer add a TXT record to a throw-away domain?
>
>> Am 24.04.2015 um 15:50 schrieb Dianne Skoll:
>>> Ummm.... are you really that unclear on the concept?  I'll explain it
>>> carefully:
>>>
>>> Spammers know that (some) filters filter less aggressively than normal
>>> on an SPF "pass".  So they register a throwaway domain and use that
>>> in the envelope sender.  They publish a TXT record for that domain to
>>> ensure they get an SPF pass.
>>>
>>> There.  That wasn't so hard, was it?
>
> On 24.04.15 15:55, Reindl Harald wrote:
>> and how does that care a SA setup?
>
> SA setup will detect such domains and will score mail positively.
> Is there something other to explain?

i don't really and everybody who pretends the opposite should be quiet 
in the future when it comes to highly false positive prone rules with 
scores of 1.5 or even higher


Mime
View raw message