Possible bug or issue |
Post Reply 
|
| Author | |
Dan B 
Senior Member 
Joined: 09 February 2005 Location: United States Status: Offline Points: 105 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Possible bug or issuePosted: 02 May 2007 at 3:03pm |
|
Roberto, I'm seeing an issue with SPF where a domain that has a valid spf record and the ip address that it's originating from is valid but it still fails the spf ruling. The domain name that we are having problems with is wayne-dalton.com. Here is their spf record that they publish. wayne-dalton.com text = "v=spf1 mx a:mail2.wayne-dalton.com,da.wayne-dalton.com,cn.wayne-dalton .com,pl.wayne-dalton.com,as2.wayne-walton.com,telnet.wayne-d alton.com,ps.wayne-da lton.com mx:mail.wayne-dalton.com ~all" Here is a snippit of our SFE logs and If you do a nslookup on the ip address 12.168.83.85 it resolves to mail2.wayne-dalton.com Does the logic within SFE have an issue with the comas that is in the spf record. I’ve seen a lot of spf records and this is the first one that I’ve seen with coma delimiters on the qualified names. Thanks, |
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 02 May 2007 at 7:55pm |
|
Dan,
Actually the SPF record does indeed indicate that the email should have been a "softfail", just like SpamFilter logged. As you configured SpamFilter to block softfails, the email was stopped. You can verify the correct interpretation for the SPF record from the openspf.org official site itself using: http://www.openspf.org/Why?show-form=1&identity=thisaddr ess%40wayne-dalton.com&ip-address=12.168.83.85&.subm it=Submit It returns: An SPF-enabled mail server rejected a message that claimed an envelope sender address of thisaddress@wayne-dalton.com.An SPF-enabled mail server received a message from mail2.wayne-dalton.com (12.168.83.85) that claimed an envelope sender address of thisaddress@wayne-dalton.com. The domain wayne-dalton.com has declared using SPF that it does not send mail through mail2.wayne-dalton.com (12.168.83.85). However, the domain is still testing its SPF policy, so the message should not have been rejected. |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 02 May 2007 at 10:05pm |
|
The passing of soft fails is the correct answer but actually renders it semi-usless as most SPF records are still in the "we are not sure" mode. It would be nice if we could somehow tag the soft-fails if enabled to pass. Just my 2-1/2 cents.
|
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.281 seconds.