improve for spf checking Tommy
    improve for spf checking Tommy
    improve for spf checking Anonymous
    improve for spf checking Anonymous
    improve for spf checking Anonymous
    improve for spf checking Anonymous
        improve for spf checking Synametrics Support

From: Tommy
Date: 2/23/26 10:27 PM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

Some spammers use random subdomain to send emails with dail-up IPs which is clean sometime,their SPF is set to be: v=spf1 +all or v=spf1 ip4:xx.xx.xx.xx +all

All those use +all should be deemed as spammer.

Hope xeams can set score for those spf record with +all or ?all 

Top

From: Tommy
Date: 2/24/26 7:17 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

For postfix it is easy to adjust the policyd-spf-perl to block it,or if using spamassassin,it is also very easy to custom score for this spam,but for xeams,as spf check result it pass and the IP is cleam,the mail content is no match the spam keywor,seems hard to block it.

Top

From: Anonymous
Date: 3/1/26 1:53 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

No support team no such case??

Top

From: Anonymous
Date: 3/1/26 3:05 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

It has become very common spam attack mode,so xeams need to update to block such domains:

 

Feb 24 17:47:45 cloud postfix/policy-spf[253127]: Blocked domain with +all SPF: 5emeavenue-courbevoie.com
Feb 24 18:49:33 cloud postfix/policy-spf[256851]: Blocked domain with +all SPF: legacoopbasilicata.it
Feb 25 03:05:08 cloud postfix/policy-spf[286528]: Blocked domain with +all SPF: simainfo.fi
Feb 25 06:06:57 cloud postfix/policy-spf[295992]: Blocked domain with +all SPF: inbeer.lu
Feb 25 20:09:58 cloud postfix/policy-spf[344546]: Blocked domain with +all SPF: appello-taal.be
Feb 25 23:53:17 cloud postfix/policy-spf[358333]: Blocked domain with +all SPF: huuuge.cloud
Feb 26 01:13:46 cloud postfix/policy-spf[363026]: Blocked domain with +all SPF: mademo.site
Feb 26 06:28:17 cloud postfix/policy-spf[379479]: Blocked domain with +all SPF: summitrf.com
Feb 26 08:26:26 cloud postfix/policy-spf[385786]: Blocked domain with +all SPF: dexertosubmit.com
Feb 26 17:22:20 cloud postfix/policy-spf[416384]: Blocked domain with +all SPF: ebii3.org
Feb 26 17:42:01 cloud postfix/policy-spf[416905]: Blocked domain with +all SPF: pdldebtassistance.com
Feb 27 01:51:29 cloud postfix/policy-spf[445329]: Blocked domain with +all SPF: mohibakhalil.com
Feb 27 02:31:04 cloud postfix/policy-spf[447338]: Blocked domain with +all SPF: elegendi.com
Feb 27 04:13:35 cloud postfix/policy-spf[452650]: Blocked domain with +all SPF: smssetnmc.com
Feb 27 06:22:35 cloud postfix/policy-spf[459267]: Blocked domain with +all SPF: mosesnutrition.net
Feb 27 07:06:21 cloud postfix/policy-spf[463837]: Blocked domain with +all SPF: 3af-cat2035.com
Feb 27 10:06:40 cloud postfix/policy-spf[473438]: Blocked domain with +all SPF: gothicgame.ru
Feb 27 13:01:03 cloud postfix/policy-spf[483248]: Blocked domain with +all SPF: jeudedame.com
Feb 27 13:28:16 cloud postfix/policy-spf[484507]: Blocked domain with +all SPF: mojadarila.com
Feb 27 19:40:33 cloud postfix/policy-spf[505584]: Blocked domain with +all SPF: woodex.sk
Feb 27 20:36:00 cloud postfix/policy-spf[508661]: Blocked domain with +all SPF: support.rnkcul.asia
Feb 28 07:34:36 cloud postfix/policy-spf[544447]: Blocked domain with +all SPF: culture-13.fr
Feb 28 17:04:38 cloud postfix/policy-spf[575134]: Blocked domain with +all SPF: keolis-paysduforez.com
Feb 28 19:09:42 cloud postfix/policy-spf[581494]: Blocked domain with +all SPF: investissement-maroc.com
Feb 28 23:18:19 cloud postfix/policy-spf[594017]: Blocked domain with +all SPF: sailingbelize.uk
Feb 28 23:41:45 cloud postfix/policy-spf[595245]: Blocked domain with +all SPF: turanmurat.com
Mar 1 01:01:45 cloud postfix/policy-spf[599841]: Blocked domain with +all SPF: setrac97.com
Mar 1 01:17:10 cloud postfix/policy-spf[600672]: Blocked domain with +all SPF: sprakresor.com
Mar 1 01:35:39 cloud postfix/policy-spf[601662]: Blocked domain with +all SPF: ligne24.ch
Mar 1 04:25:07 cloud postfix/policy-spf[609941]: Blocked domain with +all SPF: reslivingtuscany.com
Mar 1 10:32:23 cloud postfix/policy-spf[628661]: Blocked domain with +all SPF: expert-comptable-agricole-tours.com
Mar 1 13:20:16 cloud postfix/policy-spf[637225]: Blocked domain with +all SPF: cancer-maladie.com
Mar 1 14:36:51 cloud postfix/policy-spf[641242]: Blocked domain with +all SPF: livre-ai.com
Mar 1 14:36:55 cloud postfix/policy-spf[641242]: Blocked domain with +all SPF: commercialista.org

Top

From: Anonymous
Date: 3/1/26 3:10 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

If the buildin SPF function hard to adjust,you can add a custom Filters to block such domains..

Top

From: Anonymous
Date: 3/1/26 6:38 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

No need to check spf pass not not,only check domain txt record,if ends wth +all or ?all,add score to it

Top

From: Synametrics Support
Date: 3/1/26 8:53 AM
Topic: improve for spf checking
Type: General Discussions
Post a follow up

Tommy,

Thank you for submitting this request. The next version of Xeams will have this feature. Allowing you to block such domains.

Top