integration of SPF checking with exim?

[naox]

  # Query the SPF information for the sender address domain, if any,
  # to see if the sending host is authorized to deliver its mail.
  # If not, reject the mail.
  #
  deny
    message     = [SPF] $sender_host_address is not allowed to send mail \
                  from $sender_address_domain
    log_message = SPF check failed.
    spf         = fail


  # Add a SPF-Received: header to the message
  warn
    message     = $spf_received

you mean this one or something else? I added as above however
spf = fail
is unknow syntax

[chirpy]

No, I mean the one I posted from the SPF site.

[naox]

as far as I understand that spf acl is integrated into exiscan
http://duncanthrax.net/exiscan-acl/

[naox]

http://duncanthrax.net/exiscan-acl/exiscan-acl-spec.txt

8. Sender Policy Framework (SPF) support
--------------------------------------------------------------

To learn  more  about  SPF, visit   http://spf.pobox.com. This
document does   not explain  the SPF  fundamentals, you should
read and understand the implications of deploying SPF on  your
system before doing so.

SPF support is added via the libspf2 library. Visit 

  http://www.libspf2.org/
  
to obtain  a copy,  then compile  and install  it. By default,
this will  put headers  in /usr/local/include  and the  static
library in /usr/local/lib.

To compile exim with SPF support, set these additional flags in
Local/Makefile:

CFLAGS=-DSPF -I/usr/local/include
EXTRALIBS_EXIM=-L/usr/local/lib -lspf2

hmm. so I need to compile with spf support I wonder if I manage to run spf checks, will I have means to make ip whitelist for my servers. If not I sould not even go further in this one

[chirpy]

According to the exim v4.50 FAQ:
http://www.exim.org/exim-html-4.50/d..._7.html#TOC272

You need to use the ACL I posted. You're probably better off asking on the exim mailing list.

[kris1351]

Is AOL forcing servers sending mail to it to use SPF now? We have had a couple of blocks with no reason over the last week and each time I go to their horrible support page it asks if SPF is installed.

[myusername]

Is AOL forcing servers sending mail to it to use SPF now? We have had a couple of blocks with no reason over the last week and each time I go to their horrible support page it asks if SPF is installed.

Might be nice if they did. 99% of the TOS feedback loops that originate and get a server penalized are from a user that decided to forward their domain email to their AOL address, then report their own domain as spam. I would be happy if the large ISP that appeal to people who have no internet knowledge apply the SPF rule.

[jackie46]

I cant for the life of me get SPFD checks working.

I'v followed about 4 howtos from Google including this one, http://www.credentia.cc/exim/ see frame 23 and 24 and i keep getting SPFD cannot connect error even after running the recommended daemon.

Im running Exim as mailnull, mail but kicking off the daemon like this;

FreeBSD
/usr/local/bin/spfd -path=/tmp/spfd -setuser=mailnull -pathuser=mailnull -pathgroup=mail -pathmode=660 &

RH
/usr/bin/spfd -path=/tmp/spfd -setuser=mailnull -pathuser=mailnull -pathgroup=mail -pathmode=660 &

Still gives me a Cannot connect error.

Has anyone got this working?

[big]

would it be possible to enable it on certain domains and not server wide?