spf-discuss
[Top] [All Lists]

Re: [Waitman] Spamware checking SPF records?

2004-06-03 21:55:05

I have data on this, let me get a report. You can see some stats at http://emkwebdesign.com/mailstats.php - but it doesn't really show what you are looking for.

Waitman



Jeffrey Goldberg wrote:

I haven't done a systematic check, but it seems that within days of publishing SPF records, *attempts* at joe jobs against those domains have stopped.

For example, for one site I manage, we would regularly get spam which forged our own domain. Since an SPF record for the domain, the number seems to have dropped off.
And since employing SPF filtering (yesterday) there have only been two.

I'm sorry that I don't have numbers to back this up. I haven't been specifically tracking this, but will see if I grep anything useful of out logs.

But if this isn't just my imagination, I am very surprised by the speed of the spammers' response. The only way I think this could be done is if the spamware itself is checking SPF records.

-j

--  Jeffrey Goldberg
 Jeffrey(_at_)goldmark(_dot_)org                   http://www.goldmark.org/jeff/

-------
Sender Policy Framework: http://spf.pobox.com/

The Inbox Event at the Marriott San Jose features SPF.
  June 2: Email Accountability Symposium (free)
June 3: SPF Strategy BOF (free) where industry will coordinate deployment timeline
  Times: 6:30pm - 8pm, both sessions.  http://www.inboxevent.com/

Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com



<Prev in Thread] Current Thread [Next in Thread>