“This tutorial shows how to implement SPF in a Postfix 2.x installation. The Sender Policy Framework is an open standard specifying a technical method to prevent sender address forgery. There are lots of SPF extensions and patches available for Postfix, but most require that you recompile Postfix. Therefore we will install the postfix-policyd-spf-perl package from openspf.org which is a Perl package and can be implemented in existing Postfix installations (no Postfix compilation required).”
Anyone here tested spf and have any experiences with it?
the article fails to mention why a person wouldn’t just implement SPF as a TXT record in their DNS server… the whole Postfix thing looks complex compared to say adding this one line to the DNS record.
example.org. IN TXT “v=spf1 a mx -all”
I do have my work email setup with SPF and will be setting up a customer as well, however, SPF has its limitations. [there is a SPF checking plugin for Thunderbird which is fun to play with]
it’s for the receiving side of things…I think about the sending side …
It’s also an option to have the SPF checks in SpamAssassin instead of in Postfix. See http://wiki.apache.org/spamassassin/SingleUserUnixInstall#head-3f2b…
It would add aditional overhead, its better to reject spammers at the session.