spf-discuss
[Top] [All Lists]

Am I interpreting the spec wrong?

2004-09-04 05:19:59
Some of my outgoing mail is being rejected by the mail server at
shield.vancity.com:

.. while talking to shield.vancity.com.:
DATA
<<< 550 Please see
http://spf.pobox.com/why.html?sender=dist%40mcivta.city-fan.org&ip=212.56.100.58&receiver=shield.vancity.com
554 5.0.0 Service unavailable

Here are the relevant DNS records:

mcivta.city-fan.org.            TXT     "v=spf1 redirect=city-fan.org"
city-fan.org.                   TXT     "v=spf1 ptr ip4:212.159.14.0/24
exp=spf-exp.city-fan.org -all"
58.100.56.212.in-addr.arpa.     PTR     goalkeeper.city-fan.org.
goalkeeper.city-fan.org.        A       212.56.100.58
spf-exp.city-fan.org.           TXT     "Mail from %{s} at %{i} rejected: see
http://www.city-fan.org/spf-reject.html";

I believe that I have made 212.56.100.58 a valid sender for the
mcivta.city-fan.org domain (mcivta.city-fan.org SPF record redirects to
city-fan.org, which allows senders with PTR records in the city-fan.org
domain, which 212.56.100.58 has). Am I missing something, or is the SPF
implementation at shield.vancity.com broken? I've tried writing to the
postmaster there but got no response.

Perhaps there should be an official SPF compliance test suite, so that
implementations that pass it can claim "test suite compliance" or
whatever?

Paul.
-- 
Paul Howarth <paul(_at_)city-fan(_dot_)org>