Educause Security Discussion mailing list archives

Re: Question about SPF email filtering


From: David Pirolo <webmaster () WARNERPACIFIC EDU>
Date: Thu, 9 Feb 2012 10:04:38 -0800

We implemented this a few years ago.  It is integrated with our email
filter and helped eliminate quite a noticeable amount of spam and
spoofing. Rather than just rejecting all the email, known bad is
rejected, and questionable has the subject modified with the status.
This took some configuring in the filter. The business mail systems we
work with most frequently had to have there IPs added to our SPF record.

You may need to contact the senders who have bad SPF records to figure
out what is going on.  If they have had it setup for a while, then if
you've set it up correctly, you wouldn't be the only one having trouble
with them.  It does take some work to get setup, but was well worth the
effort for us.  


David Pirolo
Warner Pacific College

On Thu, 2012-02-09 at 17:16 +0000, Dye, Jan wrote:
I’m just curious to see how many of you have enabled SPF filtering on
your email systems?

 

We recently enabled this, and the result is that we have many support
tickets from users who no longer receive mail from rejected senders.
These senders are legitimate, however, they have “bad” SPF records.

 

We’re wondering how other institutions are handling this, and if SPF
checking is really worth it.

 

If I’ve posted this on the wrong list, please let me know.

 

Thanks,

 

 

Jan S. Dye

Messaging Services

Division of Information Technology

University of Missouri

920 South College  

Columbia, MO  65211

Office: (573) 882-1042

 




Current thread: