Re: [9front] nupas spf checker: outdated ip bans

[Steve Simon <steve@quintile.net>]

hi,

i agree SPF is (sadly) no longer much use.

i still run a plan 9 mail server. my main source of spam is French virtual hosts which appear in distinct up blocks. i use ratfs(1) to block cidr ranges to keep them at bay.

i also added code to ratfs to add a reverse ip address database. this supports regex so i can easily block reverse address ranges - i use tho block mail from dialup and adsl addresses.

code available to the interested.

-Steve


> On 11 Feb 2017, at 21:23, Kurt H Maier <khm@sciops.net> wrote:
> 
>> On Sat, Feb 11, 2017 at 08:42:34PM +0100, Julius Schmidt wrote:
>> on second thought, the whole cidrokay() check should go away, i.e. i 
>> propose we replace cidrokay() with "return 1;"
> 
> I support this.
> 
>> - disallow any email from the ranges
> 
> Among other things, why is the SPF checker screwing around with IP
> ranges to start with?   I am assuming it was just a convenient place to
> put these tests, but regardless, the tests are dated and arguably
> useless anyway.
> 
> khm