You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jose Luis <jo...@hotmail.com> on 2007/10/28 00:55:31 UTC
Spamassassin SPF error
Dear friends,
I installed qmail + clamav + spamassassin with SPF support, the installation is correct, but after seeing the logs spamd I get these messages, and that is why I am not blocking any mail that comes from an unauthorized server
@400000004723c0390a0cfd8c [20494] dbg: spf: checking to see if the message has a Received-SPF header that we can use@400000004723c0390a10e58c [20494] dbg: spf: checking HELO (helo=ml110a.qnet.com.pe, ip=200.31.110.173)@400000004723c03c0e822644 [20494] dbg: spf: query for /200.31.110.173/ml110a.qnet.com.pe: result: none, comment: , text: No applicable sender policy available@400000004723c03c0e9694bc [20494] dbg: spf: already checked for Received-SPF headers, proceeding with DNS based checks@400000004723c03c0e98fdec [20494] dbg: spf: cannot get Envelope-From, cannot use SPF@400000004723c03c0ebd4314 [20494] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get pass, skipping whitelist check@400000004723c03c0eca04b4 [20494] dbg: spf: whitelist_from_spf: already checked spf and didn't get pass, skipping whitelist check
Please help me that I need to determine why this is not working SPF support.
Thanks
Jose Marin
_________________________________________________________________
Discover the new Windows Vista
http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE
RE: Spamassassin SPF error
Posted by Jose Luis <jo...@hotmail.com>.
Hi friends,
It has solved the problem of the message headers to SA to work with SPF, this has been done by applying the Qmail patch QmailSpfPatch which is on the web http://wiki.apache.org/spamassassin/QmailSpfPatch
Thanks
> Date: Sun, 28 Oct 2007 11:13:06 -0400> From: mkettler_sa@verizon.net> Subject: Re: Spamassassin SPF error> To: jolumape_al@hotmail.com> CC: users@spamassassin.apache.org> > Jose Luis wrote:> > Thanks for the answer,> > > > My mail server is qmail + clamav + sa (spf) + simscan.> > > > I do some configurations Qmail or Simscan to get those headers?> I'm certainly no expert on Qmail, never used it, and I likely never will> unless DJB makes some changes, but that's really a personal preference..> > That said, there might be an updated version of simscan to do this. Ask> the simscan mailing list.> > As an alternative, you can ditch simscan and switch to qmail-scanner,> which AFAIK will generate a "X-Qmail-Scanner-Mail-From" header.> > Simscan might do something similar already, but I know very little about it.> > You can tell SA to use any abnormal headers, like the one qmail-scanner> makes, but using the envelope_sender_header option in SA.>
_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
Re: Spamassassin SPF error
Posted by Matt Kettler <mk...@verizon.net>.
Jose Luis wrote:
> Thanks for the answer,
>
> My mail server is qmail + clamav + sa (spf) + simscan.
>
> I do some configurations Qmail or Simscan to get those headers?
I'm certainly no expert on Qmail, never used it, and I likely never will
unless DJB makes some changes, but that's really a personal preference..
That said, there might be an updated version of simscan to do this. Ask
the simscan mailing list.
As an alternative, you can ditch simscan and switch to qmail-scanner,
which AFAIK will generate a "X-Qmail-Scanner-Mail-From" header.
Simscan might do something similar already, but I know very little about it.
You can tell SA to use any abnormal headers, like the one qmail-scanner
makes, but using the envelope_sender_header option in SA.
RE: Spamassassin SPF error
Posted by Jose Luis <jo...@hotmail.com>.
Thanks for the answer,
My mail server is qmail + clamav + sa (spf) + simscan.
I do some configurations Qmail or Simscan to get those headers?
This log when I do a test by sending an email from hotmail.
@400000004723f18d39fdeca4 [20494] dbg: spf: checking to see if the message has a Received-SPF header that we can use@400000004723f18d3a01d4a4 [20494] dbg: spf: checking HELO (helo=bay0-omc1-s40.bay0.hotmail.com, ip=65.54.246.112)@400000004723f18e0af5c364 [20494] dbg: spf: query for /65.54.246.112/bay0-omc1-s40.bay0.hotmail.com: result: none, comment: , text: No applicable sender policy available@400000004723f18e0b05a9b4 [20494] dbg: spf: already checked for Received-SPF headers, proceeding with DNS based checks@400000004723f18e0b07ff5c [20494] dbg: spf: cannot get Envelope-From, cannot use SPF@400000004723f18e0b2c968c [20494] dbg: rules: ran eval rule __FORGED_HOTMAIL_RCVD ======> got hit (1)@400000004723f18e0b30c0f4 [20494] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get pass, skipping whitelist check@400000004723f18e0b3d72f4 [20494] dbg: spf: whitelist_from_spf: already checked spf and didn't get pass, skipping whitelist check
Thanks
Jose Luis
> Date: Sat, 27 Oct 2007 21:38:24 -0400> From: mkettler_sa@verizon.net> Subject: Re: Spamassassin SPF error> To: jolumape_al@hotmail.com> CC: users@spamassassin.apache.org> > Jose Luis wrote:> > Dear friends,> > > > I installed qmail + clamav + spamassassin with SPF support, the> > installation is correct, but after seeing the logs spamd I get these> > messages, and that is why I am not blocking any mail that comes from> > an unauthorized server> > > > @400000004723c0390a0cfd8c [20494] dbg: spf: checking to see if the> > message has a Received-SPF header that we can use> > @400000004723c0390a10e58c [20494] dbg: spf: checking HELO> > (helo=ml110a.qnet.com.pe, ip=200.31.110.173)> > @400000004723c03c0e822644 [20494] dbg: spf: query for> > /200.31.110.173/ml110a.qnet.com.pe: result: none, comment: , text: No> > applicable sender policy available> > @400000004723c03c0e9694bc [20494] dbg: spf: already checked for> > Received-SPF headers, proceeding with DNS based checks> > @400000004723c03c0e98fdec [20494] dbg: spf: cannot get Envelope-From,> > cannot use SPF> There's no Return-Path, Envelope-Sender or similar header in the message> to tell SA what the SMTP envelope "Mail FROM" command contains.> > This might be a function of a broken MTA/MDA, ie: my ISP is broken in> this regard, or it might just be that the way you've integrated SA> doesn't add it.> > How are you calling SA? What mail tools are you using?> >
_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
Re: Spamassassin SPF error
Posted by Matt Kettler <mk...@verizon.net>.
Jose Luis wrote:
> Dear friends,
>
> I installed qmail + clamav + spamassassin with SPF support, the
> installation is correct, but after seeing the logs spamd I get these
> messages, and that is why I am not blocking any mail that comes from
> an unauthorized server
>
> @400000004723c0390a0cfd8c [20494] dbg: spf: checking to see if the
> message has a Received-SPF header that we can use
> @400000004723c0390a10e58c [20494] dbg: spf: checking HELO
> (helo=ml110a.qnet.com.pe, ip=200.31.110.173)
> @400000004723c03c0e822644 [20494] dbg: spf: query for
> /200.31.110.173/ml110a.qnet.com.pe: result: none, comment: , text: No
> applicable sender policy available
> @400000004723c03c0e9694bc [20494] dbg: spf: already checked for
> Received-SPF headers, proceeding with DNS based checks
> @400000004723c03c0e98fdec [20494] dbg: spf: cannot get Envelope-From,
> cannot use SPF
There's no Return-Path, Envelope-Sender or similar header in the message
to tell SA what the SMTP envelope "Mail FROM" command contains.
This might be a function of a broken MTA/MDA, ie: my ISP is broken in
this regard, or it might just be that the way you've integrated SA
doesn't add it.
How are you calling SA? What mail tools are you using?
Re: Spamassassin SPF error
Posted by Matt Kettler <mk...@verizon.net>.
Michael Scheidell wrote:
> you need to read more about SPF.
>
> this isn't a SA SPF problem, this is a problem with your understanding
> of how spf works.
> did you bother to check to see if the host had a spf helo record?
It doesn't matter if it had one or not. SA wouldn't have even tried to
use SPF, because there's no envelope sender available in the message
headers.
So, in some ways, this is SA relevant, or at least relevant to how his
mail tools pass information to SA.
RE: Spamassassin SPF error
Posted by Michael Scheidell <sc...@secnap.net>.
you need to read more about SPF.
this isn't a SA SPF problem, this is a problem with your understanding
of how spf works.
did you bother to check to see if the host had a spf helo record?
host -t txt ml110a.qnet.com.pe
ml110a.qnet.com.pe has no TXT record
it doesn't.
--
Michael Scheidell, CTO
Office: 561-999-5000 x 1259
Direct: 561-939-7259
Real time security alerts: http://www.secnap.com/news
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________