You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2009/05/14 16:56:24 UTC
[Bug 6113] New: DnsResolver.pm
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
Summary: DnsResolver.pm
Product: Spamassassin
Version: 3.2.5
Platform: Other
OS/Version: Linux
Status: NEW
Severity: major
Priority: P5
Component: Plugins
AssignedTo: dev@spamassassin.apache.org
ReportedBy: alvaro@hostalia.com
Running SpamAssassin, when I analize one message from the domain orange.es, SPF
checks throw:
[985] dbg: spf: checking to see if the message has a Received-SPF header that
we can use
[985] dbg: spf: using Mail::SPF for SPF checks
[985] dbg: spf: checking HELO (helo=out10.wanadoo.es, ip=62.36.20.210)
[985] dbg: spf: query for /62.36.20.210/out10.wanadoo.es: result: none,
comment: , text: No applicable sender policy available
[985] dbg: spf: already checked for Received-SPF headers, proceeding with DNS
based checks
[985] dbg: spf: checking EnvelopeFrom (helo=out10.wanadoo.es, ip=62.36.20.210,
envfrom=xxx@orange.es)
[985] warn: Exception: incomplete data at
/usr/local/lib/perl/5.10.0/Net/DNS/RR.pm line 561.
[985] warn: caught at
/usr/local/share/perl/5.10.0/Mail/SpamAssassin/DnsResolver.pm line 440
[985] dbg: spf: query for xxx@orange.es/62.36.20.210/out10.wanadoo.es: result:
fail, comment: Please see
http://www.openspf.org/Why?s=mfrom;id=xxx%40orange.es;ip=62.36.20.210;r=relay09.dns-servicios.com,
text: Mechanism '-all' matched
[985] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get
pass, skipping whitelist check
[985] dbg: rules: ran eval rule SPF_FAIL ======> got hit (1)
orange.es domain's SPF record is:
v=spf1 mx a:spf.orange.es ip4:213.143.52.0/24 -all
and spf.orange.es resolves to:
spf.orange.es. 1152 IN A 62.36.20.211
spf.orange.es. 1152 IN A 62.36.20.212
spf.orange.es. 1152 IN A 62.36.20.213
spf.orange.es. 1152 IN A 62.36.20.214
spf.orange.es. 1152 IN A 62.36.20.215
spf.orange.es. 1152 IN A 62.36.20.218
spf.orange.es. 1152 IN A 62.36.20.219
spf.orange.es. 1152 IN A 62.36.20.220
spf.orange.es. 1152 IN A 62.36.20.230
spf.orange.es. 1152 IN A 62.37.225.28
spf.orange.es. 1152 IN A 62.37.225.29
spf.orange.es. 1152 IN A 62.37.225.30
spf.orange.es. 1152 IN A 62.37.236.9
spf.orange.es. 1152 IN A 62.37.236.12
spf.orange.es. 1152 IN A 62.37.236.13
spf.orange.es. 1152 IN A 62.37.236.14
spf.orange.es. 1152 IN A 62.37.236.60
spf.orange.es. 1152 IN A 62.37.236.61
spf.orange.es. 1152 IN A 62.37.236.63
spf.orange.es. 1152 IN A 62.37.236.64
spf.orange.es. 1152 IN A 62.37.236.67
spf.orange.es. 1152 IN A 62.37.236.69
spf.orange.es. 1152 IN A 62.37.236.82
spf.orange.es. 1152 IN A 62.37.236.119
spf.orange.es. 1152 IN A 62.37.236.185
spf.orange.es. 1152 IN A 62.37.236.186
spf.orange.es. 1152 IN A 62.37.236.187
spf.orange.es. 1152 IN A 83.231.36.67
spf.orange.es. 1152 IN A 62.36.20.139
spf.orange.es. 1152 IN A 62.36.20.140
spf.orange.es. 1152 IN A 62.36.20.169
spf.orange.es. 1152 IN A 62.36.20.170
spf.orange.es. 1152 IN A 62.36.20.201
spf.orange.es. 1152 IN A 62.36.20.202
spf.orange.es. 1152 IN A 62.36.20.203
spf.orange.es. 1152 IN A 62.36.20.204
spf.orange.es. 1152 IN A 62.36.20.205
spf.orange.es. 1152 IN A 62.36.20.206
spf.orange.es. 1152 IN A 62.36.20.207
spf.orange.es. 1152 IN A 62.36.20.208
spf.orange.es. 1152 IN A 62.36.20.209
spf.orange.es. 1152 IN A 62.36.20.210
>From this server I can resolve this SPF record without problems (using TCP).
# spamassassin -V
SpamAssassin version 3.2.5
running on Perl version 5.10.0
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
Sidney Markowitz <si...@sidney.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |sidney@sidney.com
--- Comment #5 from Sidney Markowitz <si...@sidney.com> 2010-05-25 16:38:22 EDT ---
ping.
I don't want to leave this open. If the submitter does not respond to with more
information and nobody else can reproduce this I am going to close the bug as
works for me.
Anybody?
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
Karsten Bräckelmann <gu...@rudersport.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WORKSFORME
--- Comment #7 from Karsten Bräckelmann <gu...@rudersport.de> 2010-05-26 08:25:54 EDT ---
Unable to reproduce, also as per comment 6. Closing WORKSFORME.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
Alvaro Marin <al...@hostalia.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |alvaro@hostalia.com
--- Comment #6 from Alvaro Marin <al...@hostalia.com> 2010-05-26 04:04:24 EDT ---
(In reply to comment #5)
> ping.
>
> I don't want to leave this open. If the submitter does not respond to with more
> information and nobody else can reproduce this I am going to close the bug as
> works for me.
>
> Anybody?
Hi,
it seems that Orange has changed his SPF record:
"v=spf1 mx a:spf.orange.es ip4:213.143.52.0/24 ip4:62.37.236.0/24
ip4:62.36.20.0/24 ip4:62.151.11.0/24 -all"
and spf.orange.es resolves to:
spf.orange.es. 3318 IN A 62.151.4.70
spf.orange.es. 3318 IN A 62.37.225.28
spf.orange.es. 3318 IN A 62.37.225.29
spf.orange.es. 3318 IN A 62.37.225.30
spf.orange.es. 3318 IN A 83.231.36.67
spf.orange.es. 3318 IN A 62.151.4.71
spf.orange.es. 3318 IN A 62.151.4.72
spf.orange.es. 3318 IN A 62.151.4.7
so now, SPF checks are done right with this domain.
Thank you.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
Justin Mason <jm...@jmason.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|DnsResolver.pm |SPF checks throw SPF_FAIL
| |on orange.es
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
--- Comment #4 from Justin Mason <jm...@jmason.org> 2009-07-01 06:00:33 PST ---
it could be something to do with trusted_networks / internal_networks. do you
have those set?
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
--- Comment #2 from Alvaro Marin <al...@hostalia.com> 2009-07-01 02:00:24 PST ---
Created an attachment (id=4469)
--> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4469)
Mail from orange.es
Mail from orange.es
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] SPF checks throw SPF_FAIL on orange.es
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
--- Comment #3 from Sidney Markowitz <si...@sidney.com> 2009-07-01 05:42:59 PST ---
When I try it with 3.2 branch from CVS it works.
This is with Mail::SPF version 2.006, what version do you have installed?
[15299] dbg: spf: checking to see if the message has a Received-SPF header that
we can use
[15299] dbg: spf: using Mail::SPF for SPF checks
[15299] dbg: spf: checking HELO (helo=out10.wanadoo.es, ip=62.36.20.210)
[15299] dbg: spf: query for /62.36.20.210/out10.wanadoo.es: result: none,
comment: , text: No applicable sender policy available
[15299] dbg: spf: already checked for Received-SPF headers, proceeding with DNS
based checks
[15299] dbg: spf: checking EnvelopeFrom (helo=out10.wanadoo.es,
ip=62.36.20.210, envfrom=xxxx@orange.es)
[15299] dbg: spf: query for xxxx@orange.es/62.36.20.210/out10.wanadoo.es:
result: pass, comment: , text: Mechanism 'a:spf.orange.es' matched
[15299] dbg: rules: ran eval rule SPF_PASS ======> got hit (1)
$ pamassassin -V
SpamAssassin version 3.2.6-r667069
running on Perl version 5.8.9
I don't have a plain vanilla 3.2.5 handy, just the cvs head of branch 3.2. Can
anyone else see if that makes a difference?
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6113] DnsResolver.pm
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113
--- Comment #1 from Justin Mason <jm...@jmason.org> 2009-06-30 15:35:15 PST ---
please attach a message that demos this.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.