SPF Verification

[KFrank]

Hello I'm getting quite a bit of spam from email address where the domain cannot be verified. I've tried creating a HAT rule that rejected any email where the Reverse lookup could not verify the DNS. The problem here is it seems SPF records can cause the lookup to fail so you reject valid emails. Would setting up SPF verification correct this? I'd like to get emails from companies using valid SPF records but also block spammers trying to bounce email off servers to hide the actual sending address. I hope this makes sense.

[Juraj Ban]

It's recommended to use SPF verification.

But remember to regulary check quarantine beacouse there are lots of wrong configured SPF record.

Create two rules like this:

SPF record FAILS -> DROP_Action (equals - sing)

SPF record SOFTFAIL -> QUARATINE Action (equals ~ sign)

SPF record will lower spam rate.

[KFrank]

Thank you for the suggestion. I will try this.