Thanks :)
I didn't know it was case sensitive, I'll have to look out for that in future.
I suppose the other question is should it be case sensitive, there must be an awful lot of DNS entries out there with varying cases?
-----Original Message-----
From: owner-spf-help@v2.listbox.com [mailto:owner-spf-help@v2.listbox.com] On Behalf Of Koen Martens
Sent: Saturday, July 31, 2004 12:15 PM
To: spf-help@v2.listbox.com
Subject: Re: [spf-help] Problem with SPF email rejection
Hmm,
I just checked with spfquery included with libspf2:
srs# spfquery -debug -ip 216.39.67.112 -sender cwjobs-e2-27265112@ProcessRequest.com -helo DAL1BS110.PROCESSREQUEST.COM
spf_dns_null.c:64 Debug: DNS pre-cache lookup: ProcessRequest.com TXT (16)
spf_dns_resolv.c:144 Debug: DNS resolv looking for: ProcessRequest.com TXT (16)
spf_dns_null.c:94 Debug: DNS pre-cache found: ProcessRequest.com TXT (16) TTL: 1800 RR found: 1 herrno: 0 source: resolv
spf_get_spf.c:116 Debug: found SPF record: v=spf1 ptr -all
spf_dns_null.c:64 Debug: DNS pre-cache lookup: 112.67.39.216.in-addr.arpa PTR (12)
spf_dns_resolv.c:144 Debug: DNS resolv looking for: 112.67.39.216.in-addr.arpa PTR (12)
spf_dns_null.c:94 Debug: DNS pre-cache found: 112.67.39.216.in-addr.arpa PTR (12) TTL: 1800 RR found: 1 herrno: 0 source: resolv
spf_eval_id.c:551 Debug: found 1 PTR records for 216.39.67.112 (herrno: 0)
spf_dns_null.c:64 Debug: DNS pre-cache lookup: dal1bs110.processrequest.com A (1)
spf_dns_resolv.c:144 Debug: DNS resolv looking for: dal1bs110.processrequest.com A (1)
spf_dns_null.c:94 Debug: DNS pre-cache found: dal1bs110.processrequest.com A (1) TTL: 30 RR found: 1 herrno: 0 source: resolv
spf_eval_id.c:569 Debug: 0: found 1 A records for dal1bs110.processrequest.com (herrno: 0)
spf_eval_id.c:586 Debug: 0: 0: found 216.39.67.112
spf_eval_id.c:597 Debug: ProcessRequest.com == dal1bs110.processrequest.com
spf_eval_id.c:605 Debug: sRequest.com == srequest.com SPF header: version: 1 mech 2/4 mod 0/0 len=8
SPF record: v=spf1 ptr -all
err = No errors (0)
err_msg =
fail
Please see
http://spf.pobox.com/why.html?sender=cwjobs-e2-27265112%40ProcessRequest.com&ip=216.39.67.112&receiver=spfquery spfquery: domain of ProcessRequest.com does not designate 216.39.67.112 as permitted sender
Received-SPF: fail (spfquery: domain of ProcessRequest.com does not designate 216.39.67.112 as permitted sender) client-ip=216.39.67.112; envelope-from=cwjobs-e2-27265112@ProcessRequest.com; helo=DAL1BS110.PROCESSREQUEST.COM;
Maybe it's the case (ProcessRequest.com vs processrequest.com) that's giving problems here?? If that's not it, i see no reason why it should fail.
Ah yes, it definatelly is case related:
srs# spfquery -ip 216.39.67.112 -sender cwjobs-e2-27265112@processrequest.com -helo DAL1BS110.processrequest.com pass
spfquery: domain of processrequest.com designates 216.39.67.112 as permitted sender
Received-SPF: pass (spfquery: domain of processrequest.com designates 216.39.67.112 as permitted sender) client-ip=216.39.67.112; envelope-from=cwjobs-e2-27265112@processrequest.com; helo=DAL1BS110.processrequest.com;
So the solution lies with processrequest.com: have them use case consistently. If they are unwilling to normalize their dns, you could always whitelist them..
Koen
On Sat, Jul 31, 2004 at 11:54:22AM +0100, OLawton@britishlegion.org.uk wrote:
> Hi, this isn't a problem with my SPF records, I think they're OK, but I'm rejecting email from another company based on their records, I'm only having problems with this one sender, I'd to know if the problem is my end or their end.
>
> I'm using Michael Brumm's SPF filter on W2003 SMTP server, this is the
> rejection log:-
>
> Rejected client 216.39.67.112 due to an SPF failure.
> The client was connecting as "DAL1BS110.PROCESSREQUEST.COM" and sending a message from "cwjobs-e2-27265112@ProcessRequest.com".
> This violated the SPF policy for the sender's domain.
>
> Looking up the SPF for "processrequest.com" gives - "v=spf1 ptr -all"
>
> Looking up 216.39.67.112 gives:-
> Name: dal1bs110.processrequest.com
> Address: 216.39.67.112
> Aliases: 112.67.39.216.in-addr.arpa
>
> Looking up DAL1BS110.PROCESSREQUEST.COM gives:-
> Name: DAL1BS110.PROCESSREQUEST.COM
> Address: 216.39.67.112
>
> The only unusual thing I can see is the Alias in the lookup for 216.39.67.112, perhaps that's causing the rejection?
>
> Thanks
>
> Ortho Lawton
> Asst.Network manager
> Royal British Legion
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your
> subscription, please go to
> http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com
--
K.F.J. Martens, Sonologic,
http://www.sonologic.nl/ Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key:
http://www.metro.cx/pubkey-gmc.asc Wondering about the funny attachment your mail program can't read? Visit
http://www.openpgp.org/ -------
Archives at
http://archives.listbox.com/spf-help/current/ Donate!
http://spf.pobox.com/donations.html To unsubscribe, change your address, or temporarily deactivate your subscription, please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com -------
Archives at
http://archives.listbox.com/spf-help/current/ Donate!
http://spf.pobox.com/donations.html To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to
http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com