Install SPF to CentOS Postfix

In computingSender Policy Framework (SPF) allows software to identify messages that are or are not authorized to use the domain name in the SMTP HELO and MAIL FROM (Return-Path) commands, based on information published in a sender policy of the domain owner. Forged return paths are common in e-mail spam and result inbackscatter. SPF is defined in RFC 4408. from wikipedia

Install require packages

[email protected] ~ # yum install perl-Mail-SPF

Get SPF module from http://www.openspf.org/Software Newest at this time is 2.007 and Install SPF module

[email protected] ~ # wget http://www.openspf.org/blobs/postfix-policyd-spf-perl-2.007.tar.gz [email protected] ~ # tar zxvf postfix-policyd-spf-perl-2.007.tar.gz [email protected] ~ # mv postfix-policyd-spf-perl-2.007/postfix-policyd-spf-perl /usr/local/lib.

add following line to /etc/postfix/master.cf

policy  unix  –       n       n       –       0       spawn
  user=nobody argv=/usr/bin/perl /usr/local/lib/policyd-spf-perl

add following line to /etc/postfix/main.cf

smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, check_policy_service,
check_policy_service unix:private/policy
policy_time_limit = 3600

Add SPF record to your DNS. SPF record can be wizardly made from  http://old.openspf.org/wizard.html?mydomain=example.com&submit=Go%21

spf01   IN TXT “v=spf1 +ip4:xxx.xxx.xxx.xxx/24 ~all”
spf02   IN TXT “v=spf1 +ip4:yyy.yyy.yyy.yyy/24  ~all”
@       IN TXT “v=spf1 include:spf01.example.com include:spf02.example.com ~all”

4 Replies to “Install SPF to CentOS Postfix”

  1. There is an error in your text. The second dash on the line below is not the correct character, – vs -, and postfix will fail to start.

    So instead of this:
    policy unix – n n – 0 spawn
    use this:
    policy unix – n n – 0 spawn

  2. I think this is wrong. Is it two lines or one? It would at least need spaces at the beginning of the other lines to continue the line if it wraps.

    ———————————-
    add following line to /etc/postfix/main.cf

    smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, check_policy_service,
    check_policy_service unix:private/policy
    policy_time_limit = 3600
    ———————————-

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.