![[Photo of the Author]](../../common/images/BrunoSousa.jpg)
by Bruno Sousa
<bruno/at/linuxfocus.org>
锟斤拷锟斤拷锟斤拷锟斤拷:
Bruno 锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷学锟斤拷锟斤拷锟节匡拷锟斤拷时锟斤拷锟叫撅拷 Linux 锟斤拷锟斤拷影锟斤拷锟斤拷锟斤拷
目录:
|
SPF 锟斤拷锟�
![[Illustration]](../../common/images2/article354.gif)
摘要:
SPF 锟角凤拷锟酵凤拷锟斤拷锟皆匡拷锟� (Sender Policy Framework) 锟斤拷锟斤拷写锟斤拷希锟斤拷锟杰筹拷为一锟斤拷锟斤拷伪锟斤拷准锟斤拷锟斤拷锟斤拷止伪锟斤拷锟绞硷拷锟斤拷址锟斤拷锟斤拷篇锟斤拷锟铰讹拷 SPF 锟斤拷锟斤拷锟剿简单斤拷锟杰ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷一些锟脚碉拷筒锟斤拷恪�
_________________ _________________ _________________
|
SPF 锟斤拷锟斤拷锟斤拷2003锟疥，锟斤拷锟侥碉拷锟斤拷锟斤拷 Meng Weng Wong 锟斤拷锟斤拷朔锟斤拷锟� MX 锟斤拷锟斤拷锟斤拷锟斤拷(Reverse MX) 锟斤拷 DMP (Designated Mailer Protocol) 锟斤拷锟脚碉拷锟斤拷锟斤拷锟斤拷锟� SPF 锟斤拷锟斤拷锟斤拷
SPF 使锟矫碉拷锟斤拷锟绞硷拷头锟斤拷锟斤拷息锟叫碉拷 return-path (锟斤拷 MAIL FROM) 锟街段ｏ拷锟斤拷为锟斤拷锟叫碉拷 MTA 锟斤拷锟斤拷锟皆达拷锟斤拷锟斤拷锟斤拷锟斤拷些锟街段碉拷锟绞硷拷锟斤拷锟斤拷锟斤拷微锟斤拷也锟斤拷锟斤拷锟揭伙拷纸锟斤拷锟� PRA (Purported Responsible Address)锟侥凤拷锟斤拷锟斤拷PRA 锟斤拷应锟斤拷 MUA (锟斤拷锟斤拷 thunderbird) 使锟矫碉拷锟秸讹拷锟矫伙拷锟侥碉拷址锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟角帮拷 SPF 锟斤拷 PRA 锟斤拷锟斤拷锟斤拷锟斤拷锟绞憋拷颍涂锟斤拷缘玫锟斤拷锟轿斤拷摹锟絊ender ID锟斤拷锟剿★拷Sender ID 锟斤拷锟斤拷锟斤拷锟斤拷锟绞硷拷锟侥斤拷锟斤拷锟斤拷通锟斤拷锟斤拷锟� MAIL FROM 锟斤拷 PRA 锟斤拷锟斤拷证锟绞硷拷锟侥合凤拷锟皆★拷锟叫碉拷说锟斤拷锟斤拷为锟斤拷MAIL FROM 锟斤拷锟斤拷锟� MTA 锟斤拷锟叫ｏ拷锟斤拷 PRA 锟斤拷锟斤拷锟� MUA 锟斤拷锟斤拷伞锟�
锟斤拷实锟较ｏ拷SPF 锟斤拷要 DNS 锟斤拷某锟斤拷锟截讹拷锟侥凤拷式锟斤拷锟斤拷锟斤拷锟斤拷也锟斤拷锟角憋拷锟斤拷锟结供锟斤拷谓锟侥★拷锟斤拷锟斤拷 MX 锟斤拷锟斤拷锟斤拷锟斤拷录锟斤拷锟斤拷些锟斤拷录锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟皆革拷锟斤拷锟斤拷锟斤拷锟斤拷锟绞硷拷锟斤拷应锟侥凤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥壳笆癸拷玫锟� MX 锟斤拷录锟斤拷通锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷应锟侥斤拷锟斤拷锟绞硷拷锟斤拷锟斤拷锟斤拷锟侥★拷
SPF 锟斤拷锟斤拷些锟斤拷锟斤拷
要锟斤拷锟斤拷 SPF 锟斤拷锟斤拷锟斤拷锟斤拷锟较低筹拷锟斤拷锟斤拷锟诫：
- 锟斤拷锟斤拷 DNS锟斤拷锟斤拷锟斤拷 TXT 锟斤拷录锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 SPF 锟斤拷询锟斤拷锟斤拷息锟斤拷
- 锟斤拷锟斤拷锟斤拷牡锟斤拷锟斤拷始锟较低�(qmail, sendmail)使锟斤拷 SPF锟斤拷也锟斤拷锟斤拷说锟皆凤拷锟斤拷锟斤拷锟斤拷每锟斤拷锟斤拷锟斤拷锟绞硷拷锟斤拷锟斤拷锟斤拷证锟斤拷
锟斤拷锟斤拷锟斤拷一锟斤拷要锟斤拷锟绞硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟较斤拷锟叫碉拷锟斤拷锟斤拷锟斤拷一锟斤拷锟叫ｏ拷锟斤拷锟角斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟铰硷拷锟较革拷锟斤拷锟斤拷荨锟斤拷锟斤拷锟斤拷锟斤拷锟揭凤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷(bind锟斤拷djbdns)锟斤拷使锟矫碉拷锟斤法锟斤拷锟斤拷锟斤拷锟侥ｏ拷SPF 锟侥官凤拷锟斤拷站锟结供锟斤拷一锟斤拷锟杰猴拷锟矫碉拷锟斤拷锟斤拷指锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷蛹锟铰硷拷锟�
SPF 锟斤拷 TXT 锟斤拷录
SPF 锟斤拷录锟斤拷锟斤拷锟斤拷一锟斤拷 TXT 锟斤拷录之锟叫ｏ拷锟斤拷式锟斤拷锟铰ｏ拷
v=spf1 [[pre] type [ext] ] ... [mod]
每锟斤拷锟斤拷锟斤拷锟侥猴拷锟斤拷锟斤拷锟铰憋拷锟斤拷示锟斤拷
| 锟斤拷锟斤拷 |
锟斤拷锟斤拷 |
| v=spf1 | SPF 锟侥版本锟斤拷锟斤拷锟绞癸拷锟� Sender ID 锟侥伙拷锟斤拷锟斤拷锟斤拷侄尉锟接︼拷锟斤拷锟� v=spf2 |
| pre | 锟斤拷锟斤拷匹锟斤拷时锟侥凤拷锟斤拷值锟斤拷
锟斤拷锟杰的凤拷锟斤拷值锟斤拷锟斤拷锟斤拷
| 锟斤拷锟斤拷值 | 锟斤拷锟斤拷 |
| + | 缺省值锟斤拷锟节诧拷锟斤拷锟斤拷傻锟绞憋拷锟斤拷示通锟斤拷锟斤拷 |
| - | 锟斤拷示锟斤拷锟斤拷失锟杰★拷锟斤拷锟街低拷锟斤拷锟� -all锟斤拷锟斤拷示没锟斤拷锟斤拷锟斤拷锟轿猴拷匹锟戒发锟斤拷锟斤拷 |
| ~ | 锟斤拷示锟斤拷失锟杰ｏ拷通锟斤拷锟斤拷示锟斤拷锟斤拷没锟斤拷锟斤拷伞锟� |
| ? | 锟斤拷示锟斤拷锟矫可凤拷锟斤拷锟街狄餐拷锟斤拷诓锟斤拷锟矫伙拷锟斤拷锟缴碉拷时锟斤拷使锟矫★拷 |
|
| type | 锟斤拷锟斤拷使锟矫碉拷确锟较诧拷锟皆碉拷锟斤拷锟酵★拷
锟斤拷锟杰碉拷值锟斤拷锟斤拷锟斤拷
| 锟斤拷选值 | 锟斤拷锟斤拷 |
| include |
锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥诧拷锟斤拷
锟斤拷 include:domain 锟斤拷锟斤拷式锟斤拷写锟斤拷
|
| all | 锟斤拷止锟斤拷锟斤拷锟斤拷锟叫★拷
锟斤拷锟界，锟斤拷锟窖★拷锟斤拷锟�
-all锟斤拷锟斤拷么锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷录也锟斤拷锟斤拷味锟脚诧拷锟斤拷失锟斤拷锟剿★拷锟斤拷锟斤拷锟斤拷锟斤拷薹锟饺凤拷锟斤拷锟斤拷锟斤拷锟绞癸拷锟�"?all"锟斤拷锟斤拷示锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟皆斤拷锟斤拷锟斤拷锟杰★拷
|
| ip4 | 使锟斤拷 IPv4 锟斤拷锟斤拷锟斤拷证锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷锟� ip4:ipv4 锟斤拷 ip4:ipv4/cidr 锟斤拷锟斤拷式使锟矫★拷锟斤拷锟斤拷使锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷约锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷母锟斤拷伞锟�
|
| ip6 | 使锟斤拷 IPv6 锟斤拷锟斤拷锟斤拷证锟斤拷
|
| a | 使锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷证锟斤拷
锟解将锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟� A RR 锟斤拷询锟斤拷
锟斤拷锟皆帮拷锟斤拷 a:domain, a:domain/cidr 锟斤拷 a/cidr 锟斤拷锟斤拷式锟斤拷使锟矫★拷
|
| mx | 使锟斤拷 DNS MX RR 锟斤拷锟斤拷锟斤拷证锟斤拷
MX RR 锟斤拷锟斤拷锟斤拷锟斤拷锟脚碉拷 MTA锟斤拷锟斤拷锟斤拷芎头锟斤拷诺锟� MTA 锟角诧拷同锟侥ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� mx 锟侥诧拷锟皆斤拷锟斤拷失锟杰★拷
锟斤拷锟斤拷锟斤拷 mx:domain, mx:domain/cidr 锟斤拷 mx/cidr 锟斤拷些锟斤拷式锟斤拷锟斤拷 mx 锟斤拷证锟斤拷
|
| ptr | 使锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 PTR RR 锟斤拷锟斤拷锟斤拷证锟斤拷
锟斤拷时锟斤拷SPF 使锟斤拷 PTR RR 锟酵凤拷锟斤拷图锟斤拷锟叫诧拷询锟斤拷锟斤拷锟斤拷锟斤拷氐锟斤拷锟斤拷锟斤拷锟轿伙拷锟酵伙拷锟斤拷锟斤拷锟街拷冢锟斤拷锟斤拷锟街ね拷锟斤拷恕锟�
锟斤拷锟斤拷锟斤拷锟斤拷锟叫达拷锟斤拷锟� ptr:domain
|
| exist | 锟斤拷证锟斤拷锟斤拷锟侥达拷锟斤拷锟皆★拷
锟斤拷锟斤拷写锟斤拷 exist:domain 锟斤拷锟斤拷式锟斤拷
|
|
| ext | 锟斤拷锟斤拷锟� type
锟侥匡拷选锟斤拷展锟斤拷锟斤拷锟矫伙拷锟斤拷锟斤拷锟街段ｏ拷锟斤拷么锟斤拷使锟矫碉拷锟斤拷锟斤拷录锟斤拷锟斤拷锟斤拷询锟斤拷 |
| mod | 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷指示锟斤拷锟斤拷为锟斤拷录锟斤拷一锟斤拷锟斤拷锟斤拷值锟斤拷
| 锟斤拷锟斤拷值 | 锟斤拷锟斤拷 |
| redirect |
锟截讹拷锟斤拷锟窖拷锟绞癸拷酶锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� SPF 锟斤拷录锟斤拷
锟斤拷 redirect=domain 锟侥凤拷式使锟矫★拷
|
| exp |
锟斤拷锟斤拷锟斤拷录锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷频锟绞э拷锟斤拷锟较拷锟�
IN TXT "v=spf1 mx -all exp=getlost.example.com"
getlost IN TXT "You are not authorized to send mail for the domain"
|
|
锟劫ｏ拷锟斤拷锟斤拷 ISP
ISP 实施 SPF 锟斤拷锟杰讹拷锟斤拷锟斤拷锟角达拷锟斤拷锟斤拷锟斤拷状态(roaming)锟斤拷锟矫伙拷锟斤拷锟斤拷一些锟介烦锟斤拷锟斤拷锟斤拷些锟矫伙拷习锟斤拷使锟斤拷 POP-before-Relay 锟斤拷锟斤拷锟侥凤拷式锟斤拷锟斤拷锟绞硷拷锟斤拷锟斤拷锟斤拷锟斤拷 SASL SMTP 锟斤拷时锟斤拷锟斤拷锟斤拷突锟斤拷锟街★拷
锟脚ｏ拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷锟斤拷始锟斤拷锟斤拷锟街凤拷锟狡拷锟斤拷锟斤拷诺锟� ISP 锟侥伙拷锟斤拷锟斤拷捅锟斤拷肟硷拷锟斤拷锟斤拷锟绞硷拷锟斤拷锟皆★拷锟斤拷始使锟斤拷 SPF 锟剿★拷
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷钥锟斤拷堑募锟斤拷锟斤拷锟斤拷琛�
- 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� MTA 使锟斤拷 SASL锟斤拷锟斤拷锟界，锟斤拷锟斤拷锟斤拷诙丝锟� 25 锟斤拷 587 使锟斤拷锟斤拷锟斤拷
- 锟斤拷锟斤拷锟斤拷锟斤拷没锟斤拷锟斤拷丫锟绞癸拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷(spf.pobox.com 锟斤拷锟斤拷锟斤拷一锟斤拷通知锟斤拷锟斤拷锟接ｏ拷锟轿硷拷锟轿匡拷锟斤拷锟斤拷)锟斤拷
- 锟斤拷锟斤拷锟斤拷没锟揭伙拷锟斤拷锟斤拷锟斤拷冢锟揭诧拷锟斤拷锟剿碉拷锟斤拷锟斤拷锟斤拷 SPF 锟斤拷录锟斤拷锟诫到锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷之锟叫ｏ拷锟斤拷使锟矫★拷锟斤拷失锟杰★拷(~all)锟斤拷锟斤拷锟角★拷失锟杰★拷(-all)锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷捅锟斤拷锟斤拷锟斤拷锟侥凤拷锟斤拷锟斤拷锟斤拷锟斤拷目突锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷始锟街拷锟斤拷锟斤拷锟斤拷锟剿★拷
SPF 锟侥官凤拷站锟斤拷锟斤拷锟叫很讹拷锟斤拷息锟斤拷锟斤拷锟斤拷什么锟截ｏ拷
锟斤拷什么锟斤拷要锟斤拷锟侥碉拷?
SPF 锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷骗锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷锟睫ｏ拷锟斤拷统锟斤拷锟绞硷拷转锟斤拷锟斤拷式锟斤拷锟斤拷锟斤拷效锟剿★拷锟姐不锟杰斤拷锟斤拷锟斤拷锟斤拷锟� MTA 锟斤拷锟斤拷锟绞硷拷锟斤拷锟津单碉拷锟斤拷锟铰凤拷锟斤拷锟斤拷锟剿★拷锟斤拷锟斤拷锟斤拷锟叫达拷锟斤拷偷锟街凤拷锟斤拷锟斤拷锟斤拷锟� MTA 锟侥诧拷锟斤拷锟斤拷锟斤拷锟斤拷 SPF 锟斤拷锟斤拷站锟揭碉拷锟斤拷锟斤拷锟戒话说锟斤拷锟斤拷锟斤拷锟斤拷 SPF 锟斤拷录锟斤拷锟诫到锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷捅锟斤拷锟斤拷锟斤拷锟斤拷锟� MTA 锟斤拷锟斤拷锟叫凤拷锟酵碉拷址锟斤拷写锟斤拷锟斤拷使锟姐还没锟叫讹拷 SPF 锟斤拷录锟斤拷锟叫硷拷椤�
锟斤拷锟斤拷
锟斤拷锟斤拷芫锟斤拷锟� SPF 锟斤拷实施锟叫碉拷锟斤拷锟斤拷锟斤拷锟解。锟斤拷锟斤拷锟斤拷确实锟斤拷锟姐复锟接ｏ拷锟斤拷锟揭伙拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷转锟斤拷(锟轿硷拷锟轿匡拷锟斤拷锟斤拷)锟斤拷
锟斤拷锟斤拷惚伙拷锟斤拷锟斤拷始锟斤拷锟斤拷锟斤拷诺幕锟斤拷锟絊PF 锟斤拷锟斤拷锟皆帮拷锟斤拷锟姐，锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟轿憋拷锟斤拷始锟斤拷锟街凤拷锟接帮拷欤拷锟斤拷锟揭拷锟斤拷慕锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷谋锟斤拷锟斤拷锟斤拷锟斤拷锟侥碉拷锟斤拷锟绞硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟窖★拷
SPF 锟斤拷锟脚碉拷锟叫很多。锟斤拷锟斤拷锟斤拷锟斤拷锟揭讹拷一些锟斤拷锟斤拷说锟侥ｏ拷锟解不锟斤拷一夜之锟斤拷涂锟斤拷源锏斤拷模锟絊PF 锟侥好达拷锟斤拷通锟斤拷锟秸伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟街筹拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟剿讹拷使锟斤拷锟斤拷锟斤拷时锟斤拷锟斤拷锟斤拷锟斤拷缘乜锟斤拷锟斤拷恕锟�
锟斤拷也锟结到锟斤拷 Sender ID锟斤拷锟斤拷锟� SPF 锟叫关ｏ拷锟斤拷锟斤拷没锟斤拷去锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟窖撅拷知锟斤拷原锟斤拷锟剿ｏ拷微锟斤拷锟侥诧拷锟斤拷一锟斤拷锟斤拷锟�---锟斤拷锟斤拷专锟斤拷锟斤拷锟节参匡拷锟斤拷锟斤拷锟叫ｏ拷锟斤拷锟斤拷钥锟斤拷锟� openspf.org 锟斤拷锟斤拷 Sender ID 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
锟斤拷一篇锟斤拷锟斤拷锟叫ｏ拷锟斤拷锟角斤拷锟斤拷锟斤拷 MTA 锟斤拷锟斤拷锟矫ｏ拷锟斤拷锟角碉拷时锟劫硷拷锟斤拷
锟揭斤拷锟斤拷希锟斤拷锟斤拷锟斤拷一锟斤拷 SPF
锟侥硷拷锟剿碉拷锟斤拷锟斤拷锟斤拷锟斤拷源烁锟斤拷锟饺わ拷锟斤拷锟揭拷私锟斤拷锟斤拷锟斤拷息锟侥伙拷锟斤拷锟斤拷锟斤拷钥锟斤拷锟斤拷慰锟斤拷锟斤拷祝锟斤拷锟斤拷牡锟斤拷锟斤拷菥锟斤拷锟斤拷锟斤拷诖恕锟�
锟轿匡拷锟斤拷锟斤拷
SPF 锟劫凤拷锟斤拷站锟斤拷
SPF 锟劫凤拷 FAQ锟斤拷
SPF 锟劫凤拷锟津导★拷
openspf.org 锟斤拷锟斤拷 SenderID 锟斤拷锟斤拷锟斤拷
一篇锟斤拷锟斤拷
Sender ID 锟斤拷 SPF 锟侥诧拷锟斤拷锟斤拷锟斤拷锟铰★拷
转锟斤拷 SASL 时锟斤拷锟矫伙拷锟斤拷锟斤拷锟绞�
HOWTO - 锟斤拷锟斤拷
SPF 锟斤拷录
锟斤拷锟斤拷篇锟斤拷锟铰凤拷锟斤拷锟斤拷锟斤拷
每篇锟斤拷锟铰讹拷锟叫革拷锟皆的凤拷锟斤拷页锟芥。锟斤拷锟斤拷锟揭筹拷锟斤拷铮拷锟斤拷锟斤拷锟斤拷峤伙拷锟斤拷郏锟揭诧拷锟斤拷圆榭达拷锟斤拷锟斤拷锟斤拷叩锟斤拷锟斤拷郏锟�
2004-12-18, generated by lfparser version 2.51
![[LinuxFocus-icon]](../../common/images/logolftop_319x45.gif){kind=small}
