You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Norman Maurer (JIRA)" <se...@james.apache.org> on 2006/07/15 10:36:15 UTC
[jira] Commented: (JSPF-21) SPF1Data.MAX_DEPTH = 10 not enough
[ http://issues.apache.org/jira/browse/JSPF-21?page=comments#action_12421301 ]
Norman Maurer commented on JSPF-21:
-----------------------------------
>From spf spec:
SPF implementations MUST limit the number of mechanisms and modifiers
that do DNS lookups to at most 10 per SPF check, including any
lookups caused by the use of the "include" mechanism or the
"redirect" modifier. If this number is exceeded during a check, a
PermError MUST be returned. The "include", "a", "mx", "ptr", and
"exists" mechanisms as well as the "redirect" modifier do count
against this limit. The "all", "ip4", and "ip6" mechanisms do not
require DNS lookups and therefore do not count against this limit.
The "exp" modifier does not count against this limit because the DNS
lookup to fetch the explanation string occurs after the SPF record
has been evaluated.
See: http://new.openspf.org/svn/project/specs/rfc4408.txt
10.1. Processing Limits
So this should be ok.
> SPF1Data.MAX_DEPTH = 10 not enough
> ----------------------------------
>
> Key: JSPF-21
> URL: http://issues.apache.org/jira/browse/JSPF-21
> Project: jSPF
> Issue Type: Bug
> Components: Core
> Reporter: Miguel Di Ciurcio Filho
> Priority: Blocker
>
> Using the default MAX_DEPTH = 10 in SPF1Data can not finish the probe for a decision.
> Try with microsoft.com, it will fail :-P
> Microsoft's domain have alot of includes.
> Well, I rised it to 15 and now works fine.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org