SPFの設定(受信側)

とりあえず設定。

��途中作業チョンボがあり、数通をエラーコード450で再送要求しちゃいました(^^;

/etc/postfix/master.cfには、下記の場所に

#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
# The Cyrus deliver program has changed incompatibly.
#
cyrus	  unix	-	n	n	-	-	pipe
flags=R user=cyrus argv=/usr/sbin/cyrdeliver -e -m ${extension} ${user}
uucp	  unix	-	n	n	-	-	pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient
scalemail-backend unix	-	n	n	-	2	pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
policy    unix  -       n       n       -       -       spawn
user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl

# only used by postfix-tls
#smtps	  inet	n	-	n	-	-	smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#587	  inet	n	-	n	-	-	smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes

postfix-policyd-spf-perlは1.08を使いました。

/etc/postfix/main.cfは、いつのまにかこんなことに(^^;;;;。

smtpd_client_restrictions = permit_mynetworks
check_client_access hash:/etc/postfix/access
reject_unknown_client
	reject_unauth_destination
check_policy_service unix:private/policy

そして、/etc/mail/spamassassin/local.cfもこんな風に。

#---------------2007.01.21
header SPFSF Received-SPF =~ /softfail/
describe SPFPF Received-SPF: softfail
score  SPFPF 4
header SPFPS Received-SPF =~ /pass/
describe SPFPS Received-SPF: pass
score  SPFPF -20

#---------------2007.01.14
header SSBSD X-SSB-Status =~ /Server-Direct/
describe SSBSD SSB Server Direct
score  SSBSD 4
header SSBNF X-SSB-Status =~ /Non-FQDN/
describe SSBNF SSB Non FQDN
score  SSBNF 2
header SSBDR X-SSB-Status =~ /Doubt-Received/
describe SSBDR SSB Doubt-Received
score  SSBDR 2

実稼働のMLをやっているサーバで、こんなに実験しては良くないかなぁ...。