3 ms·
Easiest solution to this would be something functionally equivalent to opendkim and spamassassin to rank high in score whatever incoming SMTP traffic doesn't pa
by walrus01 4y ago
Easiest solution to this would be something functionally equivalent to opendkim and spamassassin to rank high in score whatever incoming SMTP traffic doesn't pass SPF and DKIM (obviously it doesn't pass SPF if it's claiming to come from user@domainname.com but is from an IP that is not the dns/rdns of what's in the DNS zonefile SPF record for the legit MX of domainname.com).
And then additional scoring based on DKIM fail as well.
- Aachen 4y agoThat's an option. Haven't needed this before because I just block addresses that I receive spam on. I've always just accepted every email sent that wasn't addressed to a blacklisted address, so people can't really misconfigure anything, I'll always get their email without hoops to jump. So far, the spam has been very limited, but maybe one day I'll need to do this. Or block Microsoft IPs and tell them they can sign up for my IP reputation management system that sends out emails with broken confirmation links... I haven't yet decided.