tumgreyspf

What people are saying about tumgreyspf:

Thomas Goirand

I also want to tell here that the results of tumgreyspf are often very good, specially with highly loaded server with a lot of spam. The result for one of our customers is that he used to receive about 600 spam per day, and it dropped to 30 over a week-end. Plus the load to the server is quite low.

Introduction

This is tumgreyspf, an external policy checker for the postfix mail server. It can optionally greylist and/or use spfquery to check SPF records to determine if email should be accepted by your server.

SPF is information published by the domain owner about what systems may legitimately send e-mail for the domain. Greylisting takes advantage of spam and viruses that do not follow the RFCs and retry deliveries on temporary failure. We use these checks as part of our mail system and have seen several orders of magnitude reduction in spam, lower system load, and few problems with legitimate mail getting blocked.

It uses the file-system as it's database, no additional database is required to use it.

Download

FTP: ftp.tummy.com:/pub/tummy/tumgreyspf/

Recent changes

WHATSNEW (first 15 lines):

================================
Version 1.35 -- Wed Jul 23, 2009

Fixed a bug caused when the SPF record has a NUL in it.
      Reported by Thomas Goirand

================================
Version 1.34 -- Wed Jun 10, 2009

Fixing a bug which caused many SPF return results to bypass greylisting.
      Identified by Tomasz 'urug' Olszewski

================================
Version 1.33 -- Sun Jul 20, 2008
[...]

Requirements

Python: You can get source (and binaries for selected systems) from www.python.org.

SPF requires either the C or Perl binary or Python SPF library: tumgreyspf can either call the external SPF checking program from the SPF site, or the Python SPF library. The latter is preferred.

Description and License

tumgreyspf is licensed under the GPL.

Advantages

Does not require a database library, nor does it suffer from database corruption as some other greylist implementations have.
Requires few external dependencies.
Little regular maintenance is required.