spf-discuss
[Top] [All Lists]

RE: Email Forwarder's Protocol ( EFP )

2005-02-23 01:51:47

-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com] On Behalf Of Craig 
Whitmore
Sent: woensdag 23 februari 2005 8:36
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: RE: [spf-discuss] Email Forwarder's Protocol ( EFP )

Thank you for your feedback!

2) in the log file I am getting a lot of:

Feb 23 20:24:36 dbmail-mx4 sm-mta[11848]: j1N7ORo1011848:
ruleset=check_mail, arg1=<noreply(_at_)mark(_dot_)tanea>,
relay=dialup-38.69.221.203.acc07-wick-bne.comindico.com.au
[203.221.69.38],
reject=550 5.7.1 <noreply(_at_)mark(_dot_)tanea>... Please see
http://spf.pobox.com/why(_dot_)html?sender=noreply(_at_)mark(_dot_)tanea&ip=203
.221.69.38&receiver=dbmail-mx4.orcon.co.nz:domain of sender
noreply(_at_)mark(_dot_)tanea does not exist

That does not look right at all. When I try this on my server,
I get:

220-mail.asarian-host.net ESMTP + SPF Sendmail 8.13.3/8.13.3; Wed, 23 Feb
2005 08:39:50 +0100 (CET)
.....
250-mail.asarian-host.net Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 6291456
250-DSN
250-AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
250-STARTTLS
250-DELIVERBY
250 HELP
mail from: <noreply(_at_)mark(_dot_)tanea>
501 5.1.8 Domain of sender address noreply(_at_)mark(_dot_)tanea does not exist
quit
221 2.0.0 mail.asarian-host.net closing connection
Connection closed by foreign host.

As it should. And my maillog says:

Feb 23 08:40:03 asarian-host sendmail[3487]: j1N7do15003487:
ruleset=check_mail, arg1=<noreply(_at_)mark(_dot_)tanea>, relay=localhost
[127.0.0.1], reject=501 5.1.8 Domain of sender address 
noreply(_at_)mark(_dot_)tanea
does not exist

(I tried this via a remote host as well.)

Also, I am a bit puzzled how, in your case, the connection is clearly
rejected (550 5.7.1) and STILL falls through to SBasic_check_mail (?).

The check_mail rulesets need to be the very first thing
of Scheck_mail. Right between these two lines:

Scheck_mail
R$*                $: $1 $| $>"Local_check_mail" $1

Anyway NOT to do the "domain does not exist" test in the
Socketmap and allow sendmail to do its normal stuff?

Actually, the "domain does not exist" test SHOULD be done in the
socketmap. :) As an an early-out, I mean, so as to allow to fall through
to sendmail's normal behavior. But the odd thing is that I cannot
reproduce your error. What version of Mail::SPF::Query are you using?

At any rate, I added a few lines to SPF socketmap to prevent any SPF stuff
being done when the domain does not exist/does not resolve; and you can
find the updated version at:

http://srs-socketmap.info/spf/SPF-socketmapd.0.28.tar.gz

- Mark 
 
        System Administrator Asarian-host.org
 
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx