spf-discuss
[Top] [All Lists]

Re: Am I interpreting the spec wrong?

2004-09-04 13:45:15
On Sat, 4 Sep 2004, Mark wrote:

Mail::SPF::Query (1.997), for the record, gets it right:

/usr/local/bin/spfquery -ip=212.56.100.58 
-sender=dist(_at_)mcivta(_dot_)city-fan(_dot_)org -
helo=goalkeeper.city-fan.org
pass
Mail from dist(_at_)mcivta(_dot_)city-fan(_dot_)org at 212.56.100.58 
rejected: see
http://www.city-fan.org/spf-reject.html: 212.56.100.58 PTR
goalkeeper.city-fan.org matches city-fan.org
spfquery: domain of dist(_at_)mcivta(_dot_)city-fan(_dot_)org designates 
212.56.100.58 as
permitted sender
Received-SPF: pass (spfquery: domain of 
dist(_at_)mcivta(_dot_)city-fan(_dot_)org designates
212.56.100.58 as permitted sender) client-ip=212.56.100.58;
envelope-from=dist(_at_)mcivta(_dot_)city-fan(_dot_)org; 
helo=goalkeeper.city-fan.org;

Python Milter SPF gets it right:
$ python2.3 spfquery.py -ip=212.56.100.58 
-sender=dist(_at_)mcivta(_dot_)city-fan(_dot_)org
pass

spfquery: domain of mcivta.city-fan.org designates 212.56.100.58 as permitted 
sender
Received-SPF: pass (spfquery: domain of mcivta.city-fan.org designates 
212.56.100.58 as permitted sender) client-ip=212.56.100.58; 
envelope-from=dist(_at_)mcivta(_dot_)city-fan(_dot_)org; helo=None;

It looks like libspf2 might not be using the correct domain for the
redirect.  However, the final SPF record depends on PTR - and I can
suggest another posibility from bitter experience.  About every
3 months, our ISP deletes all our PTR records ("What - who uses those
these days?").  I have learned to avoid using ptr in SPF under those
circumstances.  If that happened, then all the implementations may
be right - some just don't have the PTR cached anymore.

PS.  We stick with the ISP (Cavalier) because they offer really cheap T1 and
while completely clueless concerning DNS, keep the basic connectivity up
pretty well.

-- 
              Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.