Hello Dovecot gurus, I've set up SPF checking on my postfix gateway and have confirmed that messages from domains set with hard fails that don't come from a good sender are rejected outright. Messages from domains set with a softfail that come from bad sources are tagged in the message header with "Softfail (domain owner discourages use of this host)", but end up in the user's Inbox, anyway. I suppose I kind of figured DoceCot would see the SPF softfail in the message header and automagically route that message to Junk, but it didn't. I've looked around Google and the Dovecot documentation to see if there are any instructions on how to do this, but I can't find anything. Is there an easy way to do this or do I need something more advanced in the way of a spam filtering system? OR is doing this my mail client's responsibility and I need to look around my Thunderbird settings? I suppose it's also possible that Postfix needed to do something beyond adding the Received-SPF line in the message header, but I didn't see anything about that in the Policy-SPF config. This is my first foray into SPF so I'm open to any suggestions. Thanks, Scott -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200613/13bed4de/attachment.html>
On 14/6/20 8:07 am, Scott A. Wozny wrote:> Messages from domains set with a softfail that come from bad sources > are tagged in the message header with "Softfail (domain owner > discourages use of this host)", but end up in the user's Inbox, > anyway. I suppose I kind of figured DoceCot would see the SPF > softfail in the message header and automagically route that message > to Junk, but it didn't. > > I've looked around Google and the Dovecot documentation to see if > there are any instructions on how to do this, but I can't find > anything.You probably need to take advantage of sieve scripts so here is a super lightweight spam filtering system that might provide some useful clues.. https://markc.blog/server/using-spamprobe-via-sieve/
Hi Mark, Thanks so much for the link. Getting a better understanding of Sieve was on my to-do list. This gives me a great concrete project for my first foray. ? I was hoping there was just a switch I could throw in Dovecot to route the message, but I guess this is a living example of the modularity in modern open-source software. ? Thanks, Scott ________________________________ From: dovecot <dovecot-bounces at dovecot.org> on behalf of Mark Constable <markc at renta.net> Sent: June 13, 2020 8:52 PM To: dovecot at dovecot.org <dovecot at dovecot.org> Subject: Re: Send SPF SoftFails to Junk On 14/6/20 8:07 am, Scott A. Wozny wrote:> Messages from domains set with a softfail that come from bad sources > are tagged in the message header with "Softfail (domain owner > discourages use of this host)", but end up in the user's Inbox, > anyway. I suppose I kind of figured DoceCot would see the SPF > softfail in the message header and automagically route that message > to Junk, but it didn't. > > I've looked around Google and the Dovecot documentation to see if > there are any instructions on how to do this, but I can't find > anything.You probably need to take advantage of sieve scripts so here is a super lightweight spam filtering system that might provide some useful clues.. https://markc.blog/server/using-spamprobe-via-sieve/ -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200614/8dbb04c8/attachment.html>