patch-1
Sebastian Broekhoven 2020-11-11 22:34:40 +01:00
parent 4f4797ceb4
commit 8b990fd753
1 changed files with 0 additions and 5 deletions

View File

@ -6,9 +6,6 @@ info:
severity: info
description: Check if TXT records in DNS for SPF records that have the PTR mechanism that is spoofable.
# The PTR mechanism in an SPF records is spoofable. A bad actor can create a VPS with a mailserver and
# give it any PTR record that it wants an most VPS providers.
dns:
- name: "{{FQDN}}"
type: TXT
@ -18,8 +15,6 @@ dns:
matchers:
- type: word
words:
# Must contain SPF record
- "v=spf1"
# and must contain PTR option
- " ptr "
condition: and