[Debian-uk] email sender authentication on Debian

Stephen Gran steve at lobefin.net
Tue, 15 Apr 2008 03:05:56 +0100


--3MwIy2ne0vdjdPXF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 14, 2008 at 06:50:56PM +0100, Daniel Pocock said:
>=20
>=20
> Is there a recommended way of setting up SMTP sender authentication on=20
> Debian, particularly with the Postfix package?

Assuming you mean SPF here, probably the simplest method is to use
something like spfmilter with postfix's relatively new milter interface.
That being said ..

> I've noticed that the number of spam messages sent using forged email=20
> addresses from my own domain has been increasing, and I'm keen to stamp=
=20
> it out.

SPF won't actually do all that much for you with this sort of problem.
If you actually control all outbound mail for your domain, you probably
want something like BATV, which is designed to eliminate DSNs resulting
=66rom forged mail.  See http://babel.de/batv.html for details.
--=20
 --------------------------------------------------------------------------
|  Stephen Gran                  | It is not best to swap horses while     |
|  steve@lobefin.net             | crossing the river.   -- Abraham        |
|  http://www.lobefin.net/~steve | Lincoln                                 |
 --------------------------------------------------------------------------

--3MwIy2ne0vdjdPXF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIBA2ESYIMHOpZA44RAsUkAKCU9ed05Vv1PbBAdqccPe8I4KLQNQCgp2Iu
f+HnhlBGsa+xWVs0mQSKRIM=
=Hwkf
-----END PGP SIGNATURE-----

--3MwIy2ne0vdjdPXF--