Mailing List Archive: SPF

Hello spf-help,

These are two SPF results one is passing and the other one is
failing but passing on dnsstuff. Random ones that were failing are
now passing and ones that were passing are now failing. i am using 2
SPF text entries.

V=SPF1 ptr -all

and

V=SPF1 ptr ptr:domain.com -all

Do you know what is wrong with this.

SPF short result: pass
SPF verbose result: policy result: (pass) from rule (ptr:techapproved.com)
RFC2822 header: Received-SPF: pass (mail01.techapproved.com: domain of davidm@bounce.techapproved.com designates
63.135.110.25 as permitted sender) receiver=mail01.techapproved.com; client_ip=63.135.110.25;
envelope-from=davidm@bounce.techapproved.com;
PHP spf1_parser says:

Received-SPF: pass (match ptr)

SPF short result: pass
SPF verbose result: policy result: (pass) from rule (ptr:Fushiwa.com)
RFC2822 header: Received-SPF: pass (demeter121.fushiwa.com: domain of davidm@bounce.fushiwa.com designates
64.234.220.190 as permitted sender) receiver=demeter121.fushiwa.com; client_ip=64.234.220.190;
envelope-from=davidm@bounce.fushiwa.com;
PHP spf1_parser says:

Received-SPF: fail (match default)

SPF lookup of sender davidm@bounce.fushiwa.com from IP 64.234.220.190:

(dnsstuff.com)

SPF string used: v=spf1 ptr ptr:Fushiwa.com -all.
Processing SPF string: v=spf1 ptr ptr:Fushiwa.com -all.
Testing 'ptr' on IP=64.234.220.190, target domain bounce.fushiwa.com, CIDR 32, default=PASS. No match.
Testing 'ptr:Fushiwa.com' on IP=64.234.220.190, target domain Fushiwa.com, CIDR 32, default=PASS. MATCH!
Testing 'all' on IP=64.234.220.190, target domain bounce.fushiwa.com, CIDR 32, default=FAIL.
Result: PASS

--
Best regards,
Jean mailto:jeang@clearflow.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

You shouldn't use two txt records on the same domain, here's why: spf
implementations read the first spf record, then process that one and
done. Now which one is the first varies between lookups, 50% of the time
"v=spf1 ptr -all" is first, 50% of the time the other is.

Why would you use two different records anyway??

Koen

On Tue, Sep 21, 2004 at 10:41:53AM -0300, Jean Girard wrote:
> Hello spf-help,
>
> These are two SPF results one is passing and the other one is
> failing but passing on dnsstuff. Random ones that were failing are
> now passing and ones that were passing are now failing. i am using 2
> SPF text entries.
>
> V=SPF1 ptr -all
>
> and
>
> V=SPF1 ptr ptr:domain.com -all
>
> Do you know what is wrong with this.
>
> SPF short result: pass
> SPF verbose result: policy result: (pass) from rule (ptr:techapproved.com)
> RFC2822 header: Received-SPF: pass (mail01.techapproved.com: domain of davidm@bounce.techapproved.com designates
> 63.135.110.25 as permitted sender) receiver=mail01.techapproved.com; client_ip=63.135.110.25;
> envelope-from=davidm@bounce.techapproved.com;
> PHP spf1_parser says:
>
> Received-SPF: pass (match ptr)
>
>
> SPF short result: pass
> SPF verbose result: policy result: (pass) from rule (ptr:Fushiwa.com)
> RFC2822 header: Received-SPF: pass (demeter121.fushiwa.com: domain of davidm@bounce.fushiwa.com designates
> 64.234.220.190 as permitted sender) receiver=demeter121.fushiwa.com; client_ip=64.234.220.190;
> envelope-from=davidm@bounce.fushiwa.com;
> PHP spf1_parser says:
>
> Received-SPF: fail (match default)
>
>
> SPF lookup of sender davidm@bounce.fushiwa.com from IP 64.234.220.190:
>
>
> (dnsstuff.com)
>
> SPF string used: v=spf1 ptr ptr:Fushiwa.com -all.
> Processing SPF string: v=spf1 ptr ptr:Fushiwa.com -all.
> Testing 'ptr' on IP=64.234.220.190, target domain bounce.fushiwa.com, CIDR 32, default=PASS. No match.
> Testing 'ptr:Fushiwa.com' on IP=64.234.220.190, target domain Fushiwa.com, CIDR 32, default=PASS. MATCH!
> Testing 'all' on IP=64.234.220.190, target domain bounce.fushiwa.com, CIDR 32, default=FAIL.
> Result: PASS
>
>
> --
> Best regards,
> Jean mailto:jeang@clearflow.com
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your subscription,
> please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com