Mailing List Archive

On Wednesday 05 September 2007 23:49, Troy Fuqua wrote:
> I subscribed to these lists.
> The welcome to message that was sent to me has SPF Error in the test.
>
> most strange. --troy
>
>
> it's header:
> Received: from barn.listbox.com [207.8.226.4] by visiblehost.net with ESMTP
> (SMTPD-8.22) id A6AA0480; Wed, 05 Sep 2007 22:40:26 -0500
> Received: from localhost.localdomain (localhost [127.0.0.1])
> by barn.listbox.com (Postfix) with ESMTP id 0755DF430B
> for <troy@visiblepulse.com>; Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
> Content-Type: text/plain
> Content-Disposition: inline
> Content-Transfer-Encoding: 7bit
> MIME-Version: 1.0
> From: spf-help-request@v2.listbox.com
> Subject: Welcome to spf-help
> Message-Id: <20070906033950.0755DF430B@barn.listbox.com>
> Date: Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
> X-SPF: (76aa009300000ae5) SPFError

That header was added by your host. Using the RFC 4408 compliant validator I
maintain:

http://www.kitterman.com/spf/validate.html

That IP address and v2.listbox.com as a domain I get an SPF Pass. Listbox has
a very complex SPF record and some older, non-RFC complian, SPF libraries may
not deal with it well. I'd suggest you report this issue your provider.
Additionally, RFC 4408 specifies a header field for reporting SPF results.
Your provider should use that instead of a made up X-SPF header.

Scott K

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

Interesting.

The welcome mail from barn.listbox.com was SPFError.
----------------------------------------------------------------------
Performing check HELO = barn.listbox.com, MAILFROM = listbox+trampoline+1020+8223029+130584d3@listbox.com
Receieved policy: v=spf1 mx a:dream.listbox.com a:emerald.pobox.com mx:fallback-relay.pobox.com ptr redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
handling mechanism: mx
MX = SPFNeutral
handling mechanism: a:dream.listbox.com
A = SPFNeutral
handling mechanism: a:emerald.pobox.com
A = SPFNeutral
handling mechanism: mx:fallback-relay.pobox.com
MX = SPFNeutral
handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
query result = SPFError
----------------------------------------------------------------------


This mail from thorn.listbox.com was SPFPass.
----------------------------------------------------------------------
Performing check HELO = thorn.listbox.com, MAILFROM = listbox+trampoline+735+8223030+7587f44c@v2.listbox.com
Receieved policy: v=spf1 redirect=listbox.com
handling modifier: redirect=listbox.com
Receieved policy: v=spf1 mx a:dream.listbox.com a:emerald.pobox.com mx:fallback-relay.pobox.com ptr redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
handling mechanism: mx
MX = SPFPass
handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
query result = SPFPass
query result = SPFPass
----------------------------------------------------------------------

server thorn is the MX handler for the second message, it passes.

server barn (the first message) is apparently not handled. Is it?


--troy








---------- Original Message ----------------------------------
From: Scott Kitterman <scott@kitterman.com>
Reply-To: spf-discuss@v2.listbox.com
Date: Thu, 6 Sep 2007 00:01:33 -0400

>On Wednesday 05 September 2007 23:49, Troy Fuqua wrote:
>> I subscribed to these lists.
>> The welcome to message that was sent to me has SPF Error in the test.
>>
>> most strange. --troy
>>
>>
>> it's header:
>> Received: from barn.listbox.com [207.8.226.4] by visiblehost.net with ESMTP
>> (SMTPD-8.22) id A6AA0480; Wed, 05 Sep 2007 22:40:26 -0500
>> Received: from localhost.localdomain (localhost [127.0.0.1])
>> by barn.listbox.com (Postfix) with ESMTP id 0755DF430B
>> for <troy@visiblepulse.com>; Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
>> Content-Type: text/plain
>> Content-Disposition: inline
>> Content-Transfer-Encoding: 7bit
>> MIME-Version: 1.0
>> From: spf-help-request@v2.listbox.com
>> Subject: Welcome to spf-help
>> Message-Id: <20070906033950.0755DF430B@barn.listbox.com>
>> Date: Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
>> X-SPF: (76aa009300000ae5) SPFError
>
>That header was added by your host. Using the RFC 4408 compliant validator I
>maintain:
>
>http://www.kitterman.com/spf/validate.html
>
>That IP address and v2.listbox.com as a domain I get an SPF Pass. Listbox has
>a very complex SPF record and some older, non-RFC complian, SPF libraries may
>not deal with it well. I'd suggest you report this issue your provider.
>Additionally, RFC 4408 specifies a header field for reporting SPF results.
>Your provider should use that instead of a made up X-SPF header.
>
>Scott K
>
>-------------------------------------------
>-----------------------------------------------------------------------
>Sender Policy Framework: http://www.openspf.org/
>Archives at http://archives.listbox.com/spf-discuss/current/
>To unsubscribe, change your address, or temporarily deactivate your
>subscription,
>please go to http://v2.listbox.com/member/?list_id=735
>Powered by Listbox: http://www.listbox.com
>

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

> Performing check HELO = barn.listbox.com, MAILFROM = listbox+trampoline+1020+8223029+130584d3@listbox.com
> Receieved policy: v=spf1 mx a:dream.listbox.com a:emerald.pobox.com mx:fallback-relay.pobox.com ptr redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> handling mechanism: mx
> MX = SPFNeutral
> handling mechanism: a:dream.listbox.com
> A = SPFNeutral
> handling mechanism: a:emerald.pobox.com
> A = SPFNeutral
> handling mechanism: mx:fallback-relay.pobox.com
> MX = SPFNeutral
> handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> query result = SPFError

Where's the check for the ptr record? That's the one that passes
(according to my test):

> 00:12:21.55: Parsing mechanism: " ptr : "
> 00:12:21.55: Assuming a Pass prefix
> 00:12:21.55: Comparing against listbox.com
> 00:12:21.55: Looking for PTR records for 207.8.226.4
> 00:12:21.61: barn.listbox.com:
> 00:12:21.63: 207.8.226.4 - Verified address
> 00:12:21.63: Subdomain name matches
> 00:12:21.63: Mechanism matched; returning Pass

--Marc

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

barn.listbox.com has no SPF record, so the correct result is None for the
HELO check.

Scott K

...... Original Message .......
On Wed, 5 Sep 2007 23:34:00 -0500 "Troy Fuqua" <troy@visiblepulse.com>
wrote:
>Interesting.
>
>The welcome mail from barn.listbox.com was SPFError.
>----------------------------------------------------------------------
> Performing check HELO = barn.listbox.com, MAILFROM =
listbox+trampoline+1020+8223029+130584d3@listbox.com
> Receieved policy: v=spf1 mx a:dream.listbox.com a:emerald.pobox.com
mx:fallback-relay.pobox.com ptr redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> handling mechanism: mx
> MX = SPFNeutral
> handling mechanism: a:dream.listbox.com
> A = SPFNeutral
> handling mechanism: a:emerald.pobox.com
> A = SPFNeutral
> handling mechanism: mx:fallback-relay.pobox.com
> MX = SPFNeutral
> handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> query result = SPFError
>----------------------------------------------------------------------
>
>
>This mail from thorn.listbox.com was SPFPass.
>----------------------------------------------------------------------
> Performing check HELO = thorn.listbox.com, MAILFROM =
listbox+trampoline+735+8223030+7587f44c@v2.listbox.com
> Receieved policy: v=spf1 redirect=listbox.com
> handling modifier: redirect=listbox.com
> Receieved policy: v=spf1 mx a:dream.listbox.com a:emerald.pobox.com
mx:fallback-relay.pobox.com ptr redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> handling mechanism: mx
> MX = SPFPass
> handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> query result = SPFPass
> query result = SPFPass
>----------------------------------------------------------------------
>
>server thorn is the MX handler for the second message, it passes.
>
>server barn (the first message) is apparently not handled. Is it?
>
>
>--troy
>
>
>
>
>
>
>
>
>---------- Original Message ----------------------------------
>From: Scott Kitterman <scott@kitterman.com>
>Reply-To: spf-discuss@v2.listbox.com
>Date: Thu, 6 Sep 2007 00:01:33 -0400
>
>>On Wednesday 05 September 2007 23:49, Troy Fuqua wrote:
>>> I subscribed to these lists.
>>> The welcome to message that was sent to me has SPF Error in the test.
>>>
>>> most strange. --troy
>>>
>>>
>>> it's header:
>>> Received: from barn.listbox.com [207.8.226.4] by visiblehost.net with
ESMTP
>>> (SMTPD-8.22) id A6AA0480; Wed, 05 Sep 2007 22:40:26 -0500
>>> Received: from localhost.localdomain (localhost [127.0.0.1])
>>> by barn.listbox.com (Postfix) with ESMTP id 0755DF430B
>>> for <troy@visiblepulse.com>; Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
>>> Content-Type: text/plain
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: 7bit
>>> MIME-Version: 1.0
>>> From: spf-help-request@v2.listbox.com
>>> Subject: Welcome to spf-help
>>> Message-Id: <20070906033950.0755DF430B@barn.listbox.com>
>>> Date: Wed, 5 Sep 2007 23:39:50 -0400 (EDT)
>>> X-SPF: (76aa009300000ae5) SPFError
>>
>>That header was added by your host. Using the RFC 4408 compliant
validator I
>>maintain:
>>
>>http://www.kitterman.com/spf/validate.html
>>
>>That IP address and v2.listbox.com as a domain I get an SPF Pass.
Listbox has
>>a very complex SPF record and some older, non-RFC complian, SPF libraries
may
>>not deal with it well. I'd suggest you report this issue your provider.
>>Additionally, RFC 4408 specifies a header field for reporting SPF
results.
>>Your provider should use that instead of a made up X-SPF header.
>>
>>Scott K
>>
>>-------------------------------------------
>>-----------------------------------------------------------------------
>>Sender Policy Framework: http://www.openspf.org/
>>Archives at http://archives.listbox.com/spf-discuss/current/
>>To unsubscribe, change your address, or temporarily deactivate your
>>subscription,
>>please go to http://v2.listbox.com/member/?list_id=735
>>Powered by Listbox: http://www.listbox.com
>>
>
>-------------------------------------------
>-----------------------------------------------------------------------
>Sender Policy Framework: http://www.openspf.org/
>Archives at http://archives.listbox.com/spf-discuss/current/
>To unsubscribe, change your address, or temporarily deactivate your
>subscription,
>please go to http://v2.listbox.com/member/?list_id=735
>Powered by Listbox: http://www.listbox.com
>

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

On Thursday 06 September 2007 00:51, Marc Chametzky wrote:
> > Performing check HELO = barn.listbox.com, MAILFROM =
> > listbox+trampoline+1020+8223029+130584d3@listbox.com Receieved policy:
> > v=spf1 mx a:dream.listbox.com a:emerald.pobox.com
> > mx:fallback-relay.pobox.com ptr
> > redirect=%{l1r+}._at_.%{o2}._spf.pobox.com handling mechanism: mx
> > MX = SPFNeutral
> > handling mechanism: a:dream.listbox.com
> > A = SPFNeutral
> > handling mechanism: a:emerald.pobox.com
> > A = SPFNeutral
> > handling mechanism: mx:fallback-relay.pobox.com
> > MX = SPFNeutral
> > handling modifier: redirect=%{l1r+}._at_.%{o2}._spf.pobox.com
> > query result = SPFError
>
> Where's the check for the ptr record? That's the one that passes
>
> (according to my test):
> > 00:12:21.55: Parsing mechanism: " ptr : "
> > 00:12:21.55: Assuming a Pass prefix
> > 00:12:21.55: Comparing against listbox.com
> > 00:12:21.55: Looking for PTR records for 207.8.226.4
> > 00:12:21.61: barn.listbox.com:
> > 00:12:21.63: 207.8.226.4 - Verified address
> > 00:12:21.63: Subdomain name matches
> > 00:12:21.63: Mechanism matched; returning Pass
>
> --Marc

I'm now getting the impression that you are writing your own SPF solution.
Implementation specific questions (about how to implement, test, etc.) are
most on topic on the spf-devel mailing list. If you want to get into
detailed discussions on how to implement SPF, I'd suggest asking technical
questions there.

The specific answer to your question about PTR appears to be:

> > mx:fallback-relay.pobox.com ptr

But I think you miss the point. Mail From and HELO checks are two different
SPF checks with different record lookups. Since barn.listbox.com has no SPF
record at all:

$ dig txt barn.listbox.com

; <<>> DiG 9.3.2 <<>> txt barn.listbox.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;barn.listbox.com. IN TXT

;; AUTHORITY SECTION:
listbox.com. 3600 IN SOA ns3.rightbox.com.
hostmaster.icgroup.com. 1189081897 16384 2048 1048576 2560

The SPF result for the HELO check is None. For Mail From, the result is Pass.

Scott K

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com