SPF record

[maceee]

I use latest zcs version.
I have enter spf in my dns.
What do i need now to do at zimbra side? I fi know well at latest version spf is already implemented.
The bad is that i keep getting mail from my mail addresses. Should i increase somehow spf scoring?

This is my configs:


cat /opt/zimbra/conf/spamassassin/50_scores.cf | grep SPF
score RCVD_IN_IADB_SPF 0 -0.001 0 -0.059 # n=0 n=2
ifplugin Mail::SpamAssassin::Plugin::SPF
score USER_IN_SPF_WHITELIST -100.000
score USER_IN_DEF_SPF_WL -7.500
score ENV_AND_HDR_SPF_MATCH -0.5
endif # Mail::SpamAssassin::Plugin::SPF
# SPF
# Note that the benefit for a valid SPF record is deliberately minimal; it's
# likely that more spammers would quickly move to setting valid SPF records
ifplugin Mail::SpamAssassin::Plugin::SPF
score SPF_PASS -0.001
score SPF_HELO_PASS -0.001
score SPF_FAIL 0 0.919 0 0.001 # n=0 n=2
score SPF_HELO_FAIL 0 0.001 0 0.001 # n=0 n=2
score SPF_HELO_NEUTRAL 0 0.001 0 0.112 # n=0 n=2
score SPF_HELO_SOFTFAIL 0 0.896 0 0.732 # n=0 n=2
score SPF_NEUTRAL 0 0.652 0 0.779 # n=0 n=2
score SPF_SOFTFAIL 0 0.972 0 0.665 # n=0 n=2
endif # Mail::SpamAssassin::Plugin::SPF

[phoenix]

You do realise that SPF isn't really an anti-spam measure, don't you? All it does is confirm that you sent an email and that it was verified by your SPF record as being from your server. If a spammer creates an SPF record on some DNS server and sends you a spam email, it will pass all the SPF tests and end-up in your system. The SPF rules only check for the validity that a server is allowed to send mail, if it doesn't have SPF records then nothing will happen unless you modify the scores - not a good idea as most servers don't have SPF.

[maceee]

Yes i can understand this but what the procedure in order to install spf in zcs 6.07??
Also how can i change scoring values either for spf or dspam and etc??

thank you

[phoenix]

There's nothing to install, it's already in spamassassin as you can see from the fact you've listed the rule for it. You can change the scores by modifying the ones you've listed above, I'd suggest you leave them alone for a while and see what happens.