Blame
Date:
Mon Jan 23 05:00:25 2023 UTC
Message:
Daily backup
01
2023-01-22
jrmu
version=pmwiki-2.2.130 ordered=1 urlencoded=1
02
2023-01-22
jrmu
agent=w3m/0.5.3+git20210102
03
2023-01-22
jrmu
author=jrmu
04
2023-01-22
jrmu
charset=UTF-8
05
2023-01-22
jrmu
csum=
06
2023-01-22
jrmu
ctime=1621339728
07
2023-01-22
jrmu
host=38.81.163.143
08
2023-01-22
jrmu
name=DNS.SPF
09
2023-01-22
jrmu
rev=8
10
2023-01-22
jrmu
targets=
11
2023-01-22
jrmu
text=The Sender Policy Framework%0a%0aRead up on the [[http://www.open-spf.org/Introduction/|Sender Policy Framework]].%0a%0a!! Why?%0a%0aThere's nothing stopping someone from pretending to send mail from a fake address.%0aA scammer might send an from ceo@megacorp.com as follows:%0a%0a[@%0aPlease send me $10,000 to my temporary bank account 0123456789.%0a@]%0a%0aHow can we determine if sender's email address is fake or real? Sender Policy%0aFramework (SPF) is one tool.%0a%0a!! What it does%0a%0aSPF is a system that your mail server uses to check if the sender of the email%0acomes from the right server.%0a%0aAlmost all mail servers will check for SPF records. So, if you don't want your mail%0ato be marked as spam or phishing, you will want to set up proper DNS records.%0a%0a!! How it works%0a%0a|| border=1 width=100%25 class="sortable simpletable"%0a||! Qualifier ||! Result ||! Meaning ||! Action ||%0a|| + || Pass || Can send || Accept ||%0a|| - || Fail || Cannot send || Reject ||%0a|| ~ || SoftFail || Cannot send but still in transition || Accept but mark ||%0a|| ? || Neutral || Neutral || Accept ||%0a|| || None || No matching SPF record || Accept ||%0a|| || PermError || Error (bad SPF record) || Unknown ||%0a|| || TempError || Temporary Error || ? ||%0a%0a|| border=1 width=100%25 class="sortable simpletable"%0a||! Mechanism ||! Meaning ||%0a|| all || Always matches ||%0a|| ip4:%3caddress>/%3cprefix> || Matches IPv4 address/subnet ||%0a|| ip6:%3caddress>/%3cprefix> || Matches IPv6 address/subnet ||%0a|| a:%3cdomain> || Matches IPv4 address from A record (or AAAA record if IPv6); uses current domain if none given ||%0a|| mx:%3cdomain> || Matches IP addresses of MX records; uses current domain MX if none given ||%0a%0a|| border=1 width=100%25 class="sortable simpletable"%0a||! Record ||! Meaning ||%0a|| @@"v=spf1 mx -all"@@ || Allow MXes to send mail, deny all others. ||%0a|| @@"v=spf1 -all"@@ || The domain cannot send any mail. ||%0a|| @@"v=spf1 +all"@@ || Anyone can send mail for this domain (SPF becomes useless) ||%0a|| @@"v=spf1 ip4:192.168.0.1/24 -all"@@ || IPs between 192.168.0.1 and 192.168.0.255 can send ||%0a|| @@"v=spf1 ip6:2001:db8::/96 -all"@@ || The IPv6 subnet 2001:db8::/96 can send ||%0a|| @@"v=spf1 a -all"@@ || IPs from current domain can send mail ||%0a|| @@"v=spf1 a:example.com -all"@@ || IPs from example.com can send mail ||%0a|| @@"v=spf1 mx mx:mail.example.com -all"@@ || IPs from MX servers for current domain and mail.example.com can send ||%0a
12
2023-01-22
jrmu
time=1622726858
13
2023-01-22
jrmu
author:1622726858=jrmu
14
2023-01-22
jrmu
diff:1622726858:1622725877:=40,44c40,44%0a%3c || ip4:%3caddress>/%3cprefix> || Matches IPv4 address/subnet ||%0a%3c || ip6:%3caddress>/%3cprefix> || Matches IPv6 address/subnet ||%0a%3c || a:%3cdomain> || Matches IPv4 address from A record (or AAAA record if IPv6); uses current domain if none given ||%0a%3c || mx:%3cdomain> || Matches IP addresses of MX records; uses current domain MX if none given ||%0a%3c %0a---%0a> || ip4:%3caddress> || Matches single IPv4 address ||%0a> || ip4:%3caddress>/%3cprefix> || Match IPv4 subnet ||%0a> || ip6:%3caddress> || Matches single IPv6 address ||%0a> || ip6:%3caddress>/%3cprefix> || Match IPv6 subnet ||%0a> %0a52,54d51%0a%3c || @@"v=spf1 a -all"@@ || IPs from current domain can send mail ||%0a%3c || @@"v=spf1 a:example.com -all"@@ || IPs from example.com can send mail ||%0a%3c || @@"v=spf1 mx mx:mail.example.com -all"@@ || IPs from MX servers for current domain and mail.example.com can send ||%0a
15
2023-01-22
jrmu
host:1622726858=38.81.163.143
16
2023-01-22
jrmu
author:1622725877=jrmu
17
2023-01-22
jrmu
diff:1622725877:1622725762:=28c28%0a%3c ||! Qualifier ||! Result ||! Meaning ||! Action ||%0a---%0a> || Qualifier || Result || Meaning || Action ||%0a38c38%0a%3c ||! Mechanism ||! Meaning ||%0a---%0a> || Mechanism || Meaning ||%0a46c46%0a%3c ||! Record ||! Meaning ||%0a---%0a> || Record || Meaning ||%0a
18
2023-01-22
jrmu
host:1622725877=125.231.28.9
19
2023-01-22
jrmu
author:1622725762=jrmu
20
2023-01-22
jrmu
diff:1622725762:1622725339:=27d26%0a%3c || border=1 width=100%25 class="sortable simpletable"%0a37d35%0a%3c || border=1 width=100%25 class="sortable simpletable"%0a45d42%0a%3c || border=1 width=100%25 class="sortable simpletable"%0a
21
2023-01-22
jrmu
host:1622725762=125.231.28.9
22
2023-01-22
jrmu
author:1622725339=jrmu
23
2023-01-22
jrmu
diff:1622725339:1622724079:=36,48c36,43%0a%3c || Mechanism || Meaning ||%0a%3c || all || Always matches ||%0a%3c || ip4:%3caddress> || Matches single IPv4 address ||%0a%3c || ip4:%3caddress>/%3cprefix> || Match IPv4 subnet ||%0a%3c || ip6:%3caddress> || Matches single IPv6 address ||%0a%3c || ip6:%3caddress>/%3cprefix> || Match IPv6 subnet ||%0a%3c %0a%3c || Record || Meaning ||%0a%3c || @@"v=spf1 mx -all"@@ || Allow MXes to send mail, deny all others. ||%0a%3c || @@"v=spf1 -all"@@ || The domain cannot send any mail. ||%0a%3c || @@"v=spf1 +all"@@ || Anyone can send mail for this domain (SPF becomes useless) ||%0a%3c || @@"v=spf1 ip4:192.168.0.1/24 -all"@@ || IPs between 192.168.0.1 and 192.168.0.255 can send ||%0a%3c || @@"v=spf1 ip6:2001:db8::/96 -all"@@ || The IPv6 subnet 2001:db8::/96 can send ||%0a---%0a> Here are some example records:%0a> %0a> [@%0a> "v=spf1 -all"%0a> "v=spf1 a -all"%0a> "v=spf1 a mx -all"%0a> "v=spf1 +a +mx -all"%0a> @]%0a
24
2023-01-22
jrmu
host:1622725339=38.81.163.143
25
2023-01-22
jrmu
author:1622724079=jrmu
26
2023-01-22
jrmu
diff:1622724079:1622722128:=26a27,33%0a> There are four qualifiers:%0a> %0a> # + Pass%0a> # - Fail%0a> # ~ SoftFail%0a> # ? Neutral%0a> %0a38d44%0a%3c [@%0a43c49%0a%3c @]%0a---%0a> %0a
27
2023-01-22
jrmu
host:1622724079=38.81.163.143
28
2023-01-22
jrmu
author:1622722128=jrmu
29
2023-01-22
jrmu
diff:1622722128:1622721570:=26,49d25%0a%3c %0a%3c There are four qualifiers:%0a%3c %0a%3c # + Pass%0a%3c # - Fail%0a%3c # ~ SoftFail%0a%3c # ? Neutral%0a%3c %0a%3c || Qualifier || Result || Meaning || Action ||%0a%3c || + || Pass || Can send || Accept ||%0a%3c || - || Fail || Cannot send || Reject ||%0a%3c || ~ || SoftFail || Cannot send but still in transition || Accept but mark ||%0a%3c || ? || Neutral || Neutral || Accept ||%0a%3c || || None || No matching SPF record || Accept ||%0a%3c || || PermError || Error (bad SPF record) || Unknown ||%0a%3c || || TempError || Temporary Error || ? ||%0a%3c %0a%3c Here are some example records:%0a%3c %0a%3c "v=spf1 -all"%0a%3c "v=spf1 a -all"%0a%3c "v=spf1 a mx -all"%0a%3c "v=spf1 +a +mx -all"%0a%3c %0a
30
2023-01-22
jrmu
host:1622722128=38.81.163.143
31
2023-01-22
jrmu
author:1622721570=jrmu
32
2023-01-22
jrmu
diff:1622721570:1621339728:=4,25d3%0a%3c %0a%3c !! Why?%0a%3c %0a%3c There's nothing stopping someone from pretending to send mail from a fake address.%0a%3c A scammer might send an from ceo@megacorp.com as follows:%0a%3c %0a%3c [@%0a%3c Please send me $10,000 to my temporary bank account 0123456789.%0a%3c @]%0a%3c %0a%3c How can we determine if sender's email address is fake or real? Sender Policy%0a%3c Framework (SPF) is one tool.%0a%3c %0a%3c !! What it does%0a%3c %0a%3c SPF is a system that your mail server uses to check if the sender of the email%0a%3c comes from the right server.%0a%3c %0a%3c Almost all mail servers will check for SPF records. So, if you don't want your mail%0a%3c to be marked as spam or phishing, you will want to set up proper DNS records.%0a%3c %0a%3c !! How it works%0a
33
2023-01-22
jrmu
host:1622721570=38.81.163.143
34
2023-01-22
jrmu
author:1621339728=jrmu
35
2023-01-22
jrmu
diff:1621339728:1621339728:=1,3d0%0a%3c The Sender Policy Framework%0a%3c %0a%3c Read up on the [[http://www.open-spf.org/Introduction/|Sender Policy Framework]].%0a
36
2023-01-22
jrmu
host:1621339728=38.81.163.143
IRCNow