|
Home > Archive > Debian Developers > July 2004 > Bug#257644: ITP: libspf2 -- Sender Policy Framework library, written in C
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Bug#257644: ITP: libspf2 -- Sender Policy Framework library, written in C
|
|
| Eric Dorland 2004-07-04, 5:52 pm |
| Package: wnpp
Severity: wishlist
* Package name : libspf2
Version : 1.0.3
Upstream Author : Wayne Schlitt <wayne@midwestcs.com>
* URL : http://www.libspf2.org/
* License : GPL, BSD
Description : Sender Policy Framework library, written in C
libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
protocol pair. libspf2 is a library which allows email systems such as
Sendmail, Postfix, Exim, Zmailer and MS Exchange to check SPF records
and make sure that the email is authorized by the domain name that it is
coming from. This prevents email forgery, commonly used by spammers,
scammers and email viruses/worms.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.5
Locale: LANG=en_US, LC_CTYPE=en_US
--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
| |
| Chris Lawrence 2004-07-05, 7:51 am |
| On Mon, 05 Jul 2004 12:51:47 +0200, Josselin Mouette <joss@debian.org> wrote:
> Nothing to do with the library, but I'm trying to understand the
> protocol itself. If I understand correctly, the SPF prevents any email
> from being sent outside the corresponding IP addresses of the sender's
> domain. Am I wrong?
My understanding is that SPF says "these are valid outbound relays for
this IP block"; a receiving SMTP server outside a.b.c.d/netmask, then,
only needs to check whether a.b.c.d is a valid relay for
a.b.c.d/netmask to decide whether or not to accept mail from that IP.
Chris
--
Chris Lawrence - http://blog.lordsutch.com/
--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
| |
| Andreas Metzler 2004-07-05, 7:51 am |
| On 2004-07-05 Josselin Mouette <joss@debian.org> wrote:
[...]
> If I understand correctly, the SPF prevents any email
> from being sent outside the corresponding IP addresses of the sender's
> domain. Am I wrong?
SPF allows to specify in the DNS txt-records of domain which hosts
may send mail with this domain in MAIL FROM:. Whether receiving
mailservers enforce this is in the respective administator's domain.
> If this is true, this is one of the most stupid ideas I've seen for
> fighting spam.
SPF is not for fighting spam it is a solution for domain-owners to
restrict usage of the domain for mail to specific hosts.
i.e. I cannot send my favorite "microsoft sucks" mail with a
microsoft.com from address, or some chinese spammer cannot use from
@aol.com without going through AOL's mailserver, or I cannot use the
addr@isp1.com when I am connected via isp2.com.
The connection SPF<-->spam in press probably originates from the fact
that /currently/ many viruses and spammers regularily use innocent
third party e-mail addresses in MAIL FROM:. - A practise that SPF
would partially stop if it was used everywhere.
If you want to know more about this please consult these websites:
http://spf.pobox.com/ (official site) especially
http://spf.pobox.com/faq.html
http://spf.pobox.com/objections.html
http://www.taugh.com./mp/lmap.html
http://homepages.tesco.net./~J.deBo...is-harmful.html
cu andreas
--
"See, I told you they'd listen to Reason," [SPOILER] Svfurlr fnlf,
fuhggvat qbja gur juveyvat tha.
Neal Stephenson in "Snow Crash"
--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
| |
| Eric Dorland 2004-07-05, 5:54 pm |
| * Andreas Metzler (ametzler@downhill.at.eu.org) wrote:
> On 2004-07-04 Eric Dorland <eric@debian.org> wrote:
>
> [...]
>
> There are some not badly made inoffical packages on
> http://evanjones.ca/software/libspf-alt-debian.html - Perhaps you can
> use them.
Was unaware, but it was trivial to package, so they weren't
necessary.
> BTW please kick upstream to update Changelog, there is no information
> anywhere what happened since 0.4.
Can do.
--
Eric Dorland <eric.dorland@mail.mcgill.ca>
ICQ: #61138586, Jabber: hooty@jabber.com
1024D/16D970C6 097C 4861 9934 27A0 8E1C 2B0A 61E9 8ECF 16D9 70C6
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+
G e h! r- y+
------END GEEK CODE BLOCK------
--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
|
|
|
|
|