On Sun, 26 Feb 2006, Frank Ellermann wrote:
Hector Santos wrote:
MAIL FROM: user @ domain.com
and
MFROM.DOMAIN == HELO.DOMAIN
It is a clear cut voilation if SPF(MFROM) returns anything
but a FAIL or PASS because the client is stating it is inside
the secured autorized sending network.
Ok, guys. A member of the SPF council fails the HELO test :-)
2006Feb27 13:59:18 [9237] connect from 216-126-46-63.primefactor.com at
('216.126.46.63', 56986) EXTERNAL DYN
2006Feb27 13:59:18 [9237] hello from primefactor.com
2006Feb27 13:59:18 [9237] mail from <> ()
2006Feb27 13:59:18 [9237] REJECT: SPF fail 550 SPF fail: see
http://openspf.org/why(_dot_)html?sender=postmaster(_at_)primefactor(_dot_)com&ip=216.126.46.63
The HELO name, "primefactor.com" has an SPF record. The IP address used
by his CBV code gets an SPF fail.
His MTA then rejects my mail:
----- The following addresses had permanent fatal errors -----
(reason: 550 5.7.1 <mark(_at_)primefactor(_dot_)com>... recipient denied,
because MX 5
'mail.bmsi.com.' [24.248.44.156]
(_dot_)(_dot_)(_dot_)=stuart(_at_)bmsi(_dot_)com> did not accept the empty
address, <>, as required by RFC 821, 1123, 2505, and 2821)
Once I figure out a workaround, I'll notify him by private email...
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com