You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Guillermo Grandes (JIRA)" <se...@james.apache.org> on 2006/09/02 21:51:37 UTC

[jira] Created: (JSPF-24) Handle of non configured SPF domains with default SPF record

Handle of non configured SPF domains with default SPF record
------------------------------------------------------------

                 Key: JSPF-24
                 URL: http://issues.apache.org/jira/browse/JSPF-24
             Project: jSPF
          Issue Type: Improvement
         Environment: jSPF 0.9b2
            Reporter: Guillermo Grandes


Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.

example best_guess: "v=spf1 a/24 mx/24 ptr ?all"

This improvement is not standard, but Google uses it (cannot be bad)  ;-)

The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)

See also: 
http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Guillermo Grandes (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JSPF-24?page=comments#action_12437569 ] 
            
Guillermo Grandes commented on JSPF-24:
---------------------------------------

No problem, are only a joke (but I believe that I have idiom problems to express them correctly), critics are good, this give me the option to improve (idiom and code)! :-)

Yes, the Zen version is only "the base" to create the Bess Guess or "Trusted Forwarder SPF Global Whitelist / trusted-forwarder.org (JSPF-30)"

The original method is conserved "SPF.checkSPF(String ipAddress, String mailFrom, String hostName)" and use DNS to resolve the Policy, but the option exists to specify the policy manually, this offers many options (for testing too).

With this "Zen" base if you chose as policy:

"v=spf1 a/24 mx/24 ptr ?all" -> You have Bess Guess
"v=spf1 include:spf.trusted-forwarder.org ..." -> Trusted -Forwarder.

Inclusive a mix of two in non configured domains... guess + trusted:
"v=spf1 a/24 mx/24 ptr include:spf.trusted-forwarder.org ?all"

Later you can create a Wrapper class (with these features) that handle the switch between DNS and the local policies... If "none" is returned in the first DNS query to retrieve SPF Record... we used the locals :-)

that you think? :-)

:-) (fairy of the inspiration)

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>             Fix For: 0.9b4
>
>         Attachments: SPF.java.diff, SPF.java.Zen-Version.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Norman Maurer (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JSPF-24?page=comments#action_12437241 ] 
            
Norman Maurer commented on JSPF-24:
-----------------------------------

I don't like your patch but i like the idea :-P. IMHO we can do the same with less changes. And the setter must be synchronized.

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>         Attachments: SPF.java.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Resolved: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Norman Maurer (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JSPF-24?page=all ]

Norman Maurer resolved JSPF-24.
-------------------------------

    Resolution: Fixed

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>             Fix For: 0.9b4
>
>         Attachments: SPF.java.diff, SPF.java.Zen-Version.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Updated: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Guillermo Grandes (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JSPF-24?page=all ]

Guillermo Grandes updated JSPF-24:
----------------------------------

    Attachment: SPF.java.diff

Hi,

Attach a diff (SPF.java.diff) for the trunk (org.apache.james.jspf.SPF), for handle transitional domains (non configured with spf), force local policies, check a specified policy, etc etc.

they are a few lines, but few changes (all transparent) :-) more commentaries than code! ;-)


> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Attachments: SPF.java.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Updated: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Norman Maurer (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JSPF-24?page=all ]

Norman Maurer updated JSPF-24:
------------------------------

    Fix Version/s: 0.9b4

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>             Fix For: 0.9b4
>
>         Attachments: SPF.java.diff, SPF.java.Zen-Version.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Guillermo Grandes (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JSPF-24?page=comments#action_12437270 ] 
            
Guillermo Grandes commented on JSPF-24:
---------------------------------------

(theater) ohh that sadness is mine. They don't like my patches... That I am going to do?, I me will become shepherd! :-P
well, the idea is what counts :-)
in fact only are 2 important changes, the rest is straw. (excuse me, it is what it has been devised in a while of time that I have been able to dedicate to him)
you change what you want, is only one contribution, a sand grain... it was for to give them push to the problem :-)

"synchronized", I forgot it, I take note of that :-)

I thank for the commentaries :-)

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>         Attachments: SPF.java.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Assigned: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Norman Maurer (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JSPF-24?page=all ]

Norman Maurer reassigned JSPF-24:
---------------------------------

    Assignee: Norman Maurer

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>         Attachments: SPF.java.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Updated: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Guillermo Grandes (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JSPF-24?page=all ]

Guillermo Grandes updated JSPF-24:
----------------------------------

    Attachment: SPF.java.Zen-Version.diff

Hi Norman, this was the Zen version (SPF.java.Zen-Version.diff) ;-)

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>         Attachments: SPF.java.diff, SPF.java.Zen-Version.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JSPF-24) Handle of non configured SPF domains with default SPF record

Posted by "Norman Maurer (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JSPF-24?page=comments#action_12437464 ] 
            
Norman Maurer commented on JSPF-24:
-----------------------------------

Sorry for all the critism but that patch does not act as it should. It will use the given spf record every time. From the perldoc of spfquery this should only done if "NO" spf record was found for the given arguments. Anyway I will commit a change to SVN soon to support best guess.. 
Thx for all the patches and inspiration.

> Handle of non configured SPF domains with default SPF record
> ------------------------------------------------------------
>
>                 Key: JSPF-24
>                 URL: http://issues.apache.org/jira/browse/JSPF-24
>             Project: jSPF
>          Issue Type: Improvement
>         Environment: jSPF 0.9b2
>            Reporter: Guillermo Grandes
>         Assigned To: Norman Maurer
>         Attachments: SPF.java.diff, SPF.java.Zen-Version.diff
>
>
> Use the best guess SPF record when one cannot be found in the DNS. Note that this can only return pass or neutral.
> example best_guess: "v=spf1 a/24 mx/24 ptr ?all"
> This improvement is not standard, but Google uses it (cannot be bad)  ;-)
> The idea is that the use of this improvement and the policy that is used by default can initialize, to even force the use of a local_policy (just in case the request were arriving to us from an internal network 10.0.0.0/8 for example)
> See also: 
> http://search.cpan.org/dist/Mail-SPF-Query/lib/Mail/SPF/Query.pm#NON-STANDARD_FEATURES

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org