Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #159987 > unrolled thread

Enable SPF in postfix and Bind9??

Back to article view | Back to linux.debian.user

Contents

  Enable SPF in postfix and Bind9?? cosme@crearq.co.cu - 2015-10-29 21:10 +0100
    Re: Enable SPF in postfix and Bind9?? Jochen Spieker <ml@well-adjusted.de> - 2015-10-29 22:30 +0100
      Re: Enable SPF in postfix and Bind9?? Håkon Alstadheim <hakon@alstadheim.priv.no> - 2015-10-30 08:50 +0100
        Re: Enable SPF in postfix and Bind9?? Jochen Spieker <ml@well-adjusted.de> - 2015-10-30 12:00 +0100

#159987 — Enable SPF in postfix and Bind9??

Hi

To apply SPF to control mails as well as spoofing
users and more.
- I have a server with postfix mail for local users which is
assigned to use SASL to prevent spoofing mails.
- I have a postfix mail sever face as internet gateway both cases
Debian.
and Bind9 the internet facing server and enable SPF to prevent
from outside can send emails to my local domain as if they were
internal users ??
spamassasin use and amavisd-new also
As might enable it ???

[toc] | [next] | [standalone]

#159989

[Multipart message — attachments visible in raw view] — view raw

cosme@crearq.co.cu:
> 
> To apply SPF to control mails as well as spoofing
> users and more.
> - I have a server with postfix mail for local users which is
> assigned to use SASL to prevent spoofing mails.
> - I have a postfix mail sever face as internet gateway both cases
> Debian.
> and Bind9 the internet facing server and enable SPF to prevent
> from outside can send emails to my local domain as if they were
> internal users ??
> spamassasin use and amavisd-new also
> As might enable it ???

I have trouble comprehending what exactly you are saying and I am not
sure whether you are actually knowing what you are doing, but in order
to enable SPF for a domain, all you need to do is add a TXT record for
this domain with content like "v=spf1 mx -all". That instructs receiving
systems to only accept mails from the MX for your domain.

-- 
I lust after strangers but only date people from the office.
[Agree]   [Disagree]
                 <http://www.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [next] | [standalone]

#159995

Den 29. okt. 2015 22:27, skrev Jochen Spieker:
> cosme@crearq.co.cu:
>> To apply SPF to control mails as well as spoofing
>> users and more.
>> - I have a server with postfix mail for local users which is
>> assigned to use SASL to prevent spoofing mails.
>> - I have a postfix mail sever face as internet gateway both cases
>> Debian.
>> and Bind9 the internet facing server and enable SPF to prevent
>> from outside can send emails to my local domain as if they were
>> internal users ??
>> spamassasin use and amavisd-new also
>> As might enable it ???
> I have trouble comprehending what exactly you are saying and I am not
> sure whether you are actually knowing what you are doing, but in order
> to enable SPF for a domain, all you need to do is add a TXT record for
> this domain with content like "v=spf1 mx -all". That instructs receiving
> systems to only accept mails from the MX for your domain.
>
For the other direction (incoming), check out debian package
postfix-policyd-spf. I am currently using a locally adjusted copy, but
at least in wheezy a standard setup using that package worked as
advertised for me. Pretty sure the same holds for jessie.

[toc] | [prev] | [next] | [standalone]

#159998

[Multipart message — attachments visible in raw view] — view raw

Håkon Alstadheim:
> Den 29. okt. 2015 22:27, skrev Jochen Spieker:
>>
>> I have trouble comprehending what exactly you are saying and I am not
>> sure whether you are actually knowing what you are doing, but in order
>> to enable SPF for a domain, all you need to do is add a TXT record for
>> this domain with content like "v=spf1 mx -all". That instructs receiving
>> systems to only accept mails from the MX for your domain.
>> 
> For the other direction (incoming), check out debian package
> postfix-policyd-spf. I am currently using a locally adjusted copy, but
> at least in wheezy a standard setup using that package worked as
> advertised for me. Pretty sure the same holds for jessie.

True. I run postfix-policyd-spf-python on my jessie mail server.

J.
-- 
If I won the lottery I would keep all the money and wallpaper my house
with it.
[Agree]   [Disagree]
                 <http://www.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web