spf-discuss
[Top] [All Lists]

Re: Am I interpreting the spec wrong?

2004-09-04 08:40:33
Koen Martens wrote:

On Sat, Sep 04, 2004 at 12:45:52PM +0000, Mark wrote:

Yeah, their implementation seems broken alright. :) Following the
URL, the SPF validator at spf.pobox.com says:

"shield.vancity.com saw a message coming from the IP address
212.56.100.58 which is goalkeeper.city-fan.org; the sender claimed
to be dist(_at_)mcivta(_dot_)city-fan(_dot_)org(_dot_)

goalkeeper.city-fan.org is approved for mcivta.city-fan.org, so that
mail should have been accepted."

In which case, libspf2 is broken in this respect too:

srs# ldd /usr/local/bin/spfquery
/usr/local/bin/spfquery:
        libspf2.so.1 => /usr/local/lib/libspf2.so.1 (0x28069000)
        libc.so.4 => /usr/lib/libc.so.4 (0x28080000)
srs# spfquery -ip=212.56.100.58 
-sender=dist(_at_)mcivta(_dot_)city-fan(_dot_)org
fail
Please see

http://spf.pobox.com/why.html?sender=dist%40mcivta.city-fan.org&ip=212.56.100.58&receiver=spfquery
spfquery: domain of mcivta.city-fan.org does not designate
212.56.100.58 as permitted sender
Received-SPF: fail (spfquery: domain of mcivta.city-fan.org does not
designate 212.56.100.58 as permitted sender) client-ip=212.56.100.58;
envelope-from=dist(_at_)mcivta(_dot_)city-fan(_dot_)org;

Mail::SPF::Query (1.997), for the record, gets it right:

/usr/local/bin/spfquery -ip=212.56.100.58 
-sender=dist(_at_)mcivta(_dot_)city-fan(_dot_)org -
helo=goalkeeper.city-fan.org
pass
Mail from dist(_at_)mcivta(_dot_)city-fan(_dot_)org at 212.56.100.58 rejected: 
see
http://www.city-fan.org/spf-reject.html: 212.56.100.58 PTR
goalkeeper.city-fan.org matches city-fan.org
spfquery: domain of dist(_at_)mcivta(_dot_)city-fan(_dot_)org designates 
212.56.100.58 as
permitted sender
Received-SPF: pass (spfquery: domain of 
dist(_at_)mcivta(_dot_)city-fan(_dot_)org designates
212.56.100.58 as permitted sender) client-ip=212.56.100.58;
envelope-from=dist(_at_)mcivta(_dot_)city-fan(_dot_)org; 
helo=goalkeeper.city-fan.org;

I wonder what James' libsrs does. :)

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx