headers
wayne | 1 Feb 2005 10:41

Andrew Newton (MARID co-chair) has some recent blogs on SPF


fyi;

Andy Newton, the co-chair of the IETF MARID working group, has just
recently posted a bunch of blog entries about SPF.  Check them out
here:

http://hxr.us/blojsom/blog/grumpops/computers/anti-spam/

The most recent one, posted yesterday is called "SPF Adoption Rate
Decreases".  Andy has done another survey of the .com/.net domain
looking for SPF records and has found a decrease in the publication
rate.  I was amused because I'm in the middle of redoing some of my
surveys on the same thing.  I've finished the .org and .net, and I'm
about a quarter of the way through the .com's.  I haven't done any
analysis on the data yet, but it wouldn't suprise me if I come up with
the same results as Andy.

The next most recent blog entry is a pointer to a pod-cast interview
between Marshall Rose (the other co-chair of MARID) and Andy about
"The MARID Fiasco".  Interesting listening.

The last recent blog talks about "Wherefore art thou Sender ID?".
Basically Andy points out that MS has been quietly moving ahead with
SenderID and he says that "It is probably only a matter of months
before Microsoft releases the next service pack for Exchange".  I
found this interesting, because the news reports I've seen is that say
that the SP2 for Exchange 2003 will be either "later this year" or "in
the second half of this year".
(e.g. http://www.rednova.com/news/display/?id=120833 )
(Continue reading)

Permalink | Reply | 1 comment |
headers
ecsd | 2 Feb 2005 03:40
Favicon

Undefined symbols SPF_<blah> in libspf2-1.2.0

compilation of spfquery.c fails because SPF_id_t and SPF_dns_config_t are undefined -
but they are not defined ANYWHERE.

At the top of the unpacked directory do

find . -type f | xargs grep SPF_id_t

for example, and you see references to the symbol but nothing that defines the symbol.
Can someone please supply the missing header file, or definitions?
Permalink | Reply | 3 comments |
headers
Chris Drake | 4 Feb 2005 02:59
Picon
Favicon

Re: RE: SPF Routines For Windows and VB .Net

Hi,

Read up on your VB doco about how to call external DLLs - it's not too
hard.  Since RMSPF.DLL is not a COM object, it looks like you're
looking at the wrong stuff presently.

Kind Regards,
Chris Drake

Tuesday, February 1, 2005, 8:38:04 AM, you wrote:

JL> Roger, I figured this belongs back on the correct list.

>> -----Original Message-----
>> From: Roger Moser [mailto:Roger.Moser <at> rama.pamho.net]
>> Sent: Monday, 31 January 2005 11:31 PM
>> To: Julian Lawrence
>> Subject: SPF Routines For Windows and VB .Net
>>
>>
>> Julian,
>>
>> > Any idea on how to reference the RMSPF.DLL in a VB .Net Project
>>
>> I don't know what a VB .Net Project is.

JL> Not everyone writes in all programming languages.

>>
>> > I get an error - "This is not a valid assembly or COM component"
(Continue reading)

Permalink | Reply | 0 comments |
headers
Chris Drake | 4 Feb 2005 03:01
Picon
Favicon

Concerned spammers

Hi All,

Some of you might be interested to note that my automated SPF testing
tool has been getting mostly tests from what appears to be fresh
in-production spams... so at least some spammers out there appear to
care slightly about SPF it seems?

Kind Regards,
Chris Drake
Permalink | Reply | 0 comments |
headers
James Couzens | 4 Feb 2005 09:18
Picon

Spam Zombies use ISP's MX to proliferate their trash...

Many of you will likely find this interesting, especially any of you
annoyed or disturbed by claims from ISP's blocking port 25 traffic that
"they've won the war" or in any other way insinuated that the problem
was no longer a problem:

http://news.com.com/Experts+Zombie+trick+set+to+send+spam
+sky-high/2100-7349_3-5560664.html?tag=nefd.top

Cheers,

James

--

-- 
James Couzens,
Programmer
                                                     ( ( (      
      ((__))         __\|/__        __|-|__        '. ___ .'    
       (00)           (o o)          (0~0)        '  (> <) '    
---nn-(o__o)-nn---ooO--(_)--Ooo--ooO--(_)--Ooo---ooO--(_)--Ooo---
http://libspf.org -- ANSI C Sender Policy Framework library
http://libsrs.org -- ANSI C Sender Rewriting Scheme library
-----------------------------------------------------------------
PGP: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x7A7C7DCF

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Read the whitepaper!  http://spf.pobox.com/whitepaper.pdf
To unsubscribe, change your address, or temporarily deactivate your subscription, 
please go to http://v2.listbox.com/member/?listname=spf-discuss <at> v2.listbox.com
(Continue reading)

Permalink | Reply | 2 comments |
headers
James Couzens | 4 Feb 2005 09:22
Picon

Re: Undefined symbols SPF_<blah> in libspf2-1.2.0

On Tue, 2005-02-01 at 18:40 -0800, ecsd <at> transbay.net wrote:

> compilation of spfquery.c fails because SPF_id_t and SPF_dns_config_t are undefined -
> but they are not defined ANYWHERE.
> 
> At the top of the unpacked directory do
> 
> find . -type f | xargs grep SPF_id_t
> 
> for example, and you see references to the symbol but nothing that defines the symbol.
> Can someone please supply the missing header file, or definitions?

You can try the 'spfquery' tool that comes with libSPF
(http://libSPF.org) which I renamed to 'spfqtool' to avoid any
confusion.  It compiles fine and works great too.  Compile with the
debugging options and use the debug flag for scads of helpful output.

There is also the SPF Validator which is great for CGI's and other
related things available  <at>  http://spfval.codeshare.ca

Cheers,

James

--

-- 
James Couzens,
Programmer
                                                     ( ( (      
      ((__))         __\|/__        __|-|__        '. ___ .'    
       (00)           (o o)          (0~0)        '  (> <) '
(Continue reading)

Permalink | Reply | 2 comments |
headers
Stephane Bortzmeyer | 4 Feb 2005 10:23
Picon

Re: Spam Zombies use ISP's MX to proliferate their trash...

On Fri, Feb 04, 2005 at 12:18:29AM -0800,
 James Couzens <jcouzens <at> 6o4.ca> wrote 
 a message of 50 lines which said:

> Many of you will likely find this interesting,

Extremely old news, known for a long time. Only interesting for
reporters.
Permalink | Reply | 1 comment |
headers
James Couzens | 4 Feb 2005 10:44
Picon

[OT] Re: Spam Zombies use ISP's MX to proliferate their trash...

On Fri, 2005-02-04 at 10:23 +0100, Stephane Bortzmeyer wrote:
> On Fri, Feb 04, 2005 at 12:18:29AM -0800,
>  James Couzens <jcouzens <at> 6o4.ca> wrote 
>  a message of 50 lines which said:
> 
> > Many of you will likely find this interesting,
> 
> Extremely old news, known for a long time. Only interesting for
> reporters.

Yes we KNOW its been happening, the point is that by the time the media
get wind of something, it means that its likely a growing trend (which I
believe it to be especially as more and more ISP's jump on board with
the blocking of port 25).  

You (like myself) are in a position to discover this by simply doing
your job, however I do believe there are likely a fair number of
individuals here who although sure they run or are in a position of
administration over and e-mail system(s), don't necessarily operate them
on the same level as an ISP and thus wouldn't necessarily be privy to
this information first hand.

Cheers,

James

--

-- 
James Couzens,
Programmer
                                                     ( ( (
(Continue reading)

Permalink | Reply | 0 comments |
headers
Hallam-Baker, Phillip | 4 Feb 2005 14:21
Picon
Favicon

RE: Spam Zombies use ISP's MX to proliferate their trash...

This has been a rising trend for some time.

The answer is to put reasonable limits on email sending in place. This will
take the broadband providers some time. Most are not primarily Internet
companies, they are cable companies providing Internet access as a sideline.

Don't be surprised if they take some time to react. 

> -----Original Message-----
> From: owner-spf-discuss <at> v2.listbox.com 
> [mailto:owner-spf-discuss <at> v2.listbox.com] On Behalf Of James Couzens
> Sent: Friday, February 04, 2005 3:18 AM
> To: spf-discuss <at> v2.listbox.com
> Subject: [spf-discuss] Spam Zombies use ISP's MX to 
> proliferate their trash...
> 
> 
> Many of you will likely find this interesting, especially any 
> of you annoyed or disturbed by claims from ISP's blocking 
> port 25 traffic that "they've won the war" or in any other 
> way insinuated that the problem was no longer a problem:
> 
http://news.com.com/Experts+Zombie+trick+set+to+send+spam
+sky-high/2100-7349_3-5560664.html?tag=nefd.top

Cheers,

James

--

--
(Continue reading)

Permalink | Reply | 501 comments |
headers
Radu Hociung | 4 Feb 2005 16:06
Favicon

Re: Undefined symbols SPF_<blah> in libspf2-1.2.0

Sorry but the libspf query tool does not work as well as advertised. See 
the following incosistent results:

[radu <at> sun radu]$ spfqtool -i 192.168.0.1 -s anything <at> aol.com
You didn't give me a helo host, using (nobody)
SPF short result:   neutral
SPF verbose result: policy result: (neutral) from rule (?all)
->>> RFC2822 header:     neutral (nobody: domain of anything <at> aol.com is 
neutral about
  designating 192.168.0.1 as permitted sender)

[radu <at> sun radu]$ spfqtool -i 192.168.0.1 -s anything <at> aol.com
You didn't give me a helo host, using (nobody)
SPF short result:   pass
SPF verbose result: policy result: (pass) from rule (v=spf1)
->>> RFC2822 header:     pass (nobody: domain of anything <at> aol.com 
designates 192.168.0.1 as permitted sender) receiver=nobody; 
client_ip=192.168.0.1; envelope-from=anything <at> aol.com;
[radu <at> sun radu]$

Greetings,
Radu Hociung

James Couzens wrote:
> On Tue, 2005-02-01 at 18:40 -0800, ecsd <at> transbay.net wrote:
> 
> 
>>compilation of spfquery.c fails because SPF_id_t and SPF_dns_config_t are undefined -
>>but they are not defined ANYWHERE.
>>
(Continue reading)

Permalink | Reply | 1 comment |

Gmane