On Sat, 27 Jan 2007, David MacQuigg wrote:
Most small companies now use a spam appliance, like the Barracuda box we
have at U of A. These seem to be very "user friendly" in providing a nice
web interface for whitelisting and blacklisting.
I get a constant stream of spam from barracudas. Like this, only several
times a minute:
2007Jan27 00:57:29 [399] connect from navgw2.affinitygroup.com at
('12.17.223.118', 41374) EXTERNAL
2007Jan27 00:57:29 [399] hello from den-barracuda.affinitygroup.com
2007Jan27 00:57:29 [399] mail from <> ('SIZE=2516',)
2007Jan27 00:57:29 [399] Received-SPF: none (mail.bmsi.com: 12.17.223.118 is
neither permitted nor denied by domain of den-barracuda.affinitygroup.com)
client_ip=12.17.223.118; helo=den-barracuda.affinitygroup.com;
receiver=mail.bmsi.com; identity=helo
2007Jan27 00:57:29 [399] X-Guessed-SPF: neutral
2007Jan27 00:57:29 [399] rcpt to <rkmna(_at_)bmsaix(_dot_)bmsi(_dot_)com> ()
2007Jan27 00:57:29 [399] REJECT: bounce with no SRS encoding
The only good thing is that they have *finally* started using real
DSNs instead of replies, so at least I am rejecting them in SMTP
envelope now. I would actually be impressed if they checked SPF and
rejected SPF FAIL. (Although maybe that is a config option, and I
just never see mail from boxes that are configured that way.)
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735