Re: [opensuse-factory] virus sent by opensuse.org?

On Sun, 2016-02-14 at 15:52 +0100, Carlos E. R. wrote:

On Saturday, 2016-02-13 at 15:13 +1100, Basil Chupin wrote:

...

On 12/02/16 08:22, Dominique Leuenberger wrote:

...

...

On 11 Feb 2016, at 22:05, Jan Engelhardt wrote:

...

From: scanner@opensuse.org To: marguerite [AT] opensuse.org

Needless to say that the "From" is forged ;-) SPF *cough* Come up with the TXT record that actually blocks all forged addresses but allows all legit users to keep using their email address - and keep in mind that opensuse.org does not offer an smtp server.

SPF is pretty useless there.

Not if SRS is implemented.

Still: SPF/SRS combo will only be effective for anything I send from my @opensuse.org address to any other @opensuse.org address where any openSUSE server even has the chance to see it. If I send using my @opensuse.org address to your telefonica.net address directly, with a strict SPF, my mail never ever passes any opensuse infra - as openSUSE does not offer SMTP Servers, I am forced to use my own infrastructure. Hence: SPF is useless for this kind of setup (or one ends up with the usual ~ALL record, which basically allows everything again, taking the full power of SPF away) But this entire discussion should not be here - as it really has nothing to do with Factory/Tumbleweed or ANY openSUSE distribution (released or planned). Cheers, Dominique -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org