https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6113

           Summary: DnsResolver.pm
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P5
         Component: Plugins
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Running SpamAssassin, when I analize one message from the domain orange.es, SPF
checks throw:

[985] dbg: spf: checking to see if the message has a Received-SPF header that
we can use
[985] dbg: spf: using Mail::SPF for SPF checks
[985] dbg: spf: checking HELO (helo=out10.wanadoo.es, ip=62.36.20.210)
[985] dbg: spf: query for /62.36.20.210/out10.wanadoo.es: result: none,
comment: , text: No applicable sender policy available
[985] dbg: spf: already checked for Received-SPF headers, proceeding with DNS
based checks
[985] dbg: spf: checking EnvelopeFrom (helo=out10.wanadoo.es, ip=62.36.20.210,
[email protected])
[985] warn: Exception: incomplete data at
/usr/local/lib/perl/5.10.0/Net/DNS/RR.pm line 561.
[985] warn:  caught at
/usr/local/share/perl/5.10.0/Mail/SpamAssassin/DnsResolver.pm line 440
[985] dbg: spf: query for [email protected]/62.36.20.210/out10.wanadoo.es: result:
fail, comment: Please see
http://www.openspf.org/Why?s=mfrom;id=xxx%40orange.es;ip=62.36.20.210;r=relay09.dns-servicios.com,
text: Mechanism '-all' matched
[985] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get
pass, skipping whitelist check
[985] dbg: rules: ran eval rule SPF_FAIL ======> got hit (1)

orange.es domain's SPF record is:

v=spf1 mx a:spf.orange.es ip4:213.143.52.0/24 -all

and spf.orange.es resolves to:

spf.orange.es.          1152    IN      A       62.36.20.211
spf.orange.es.          1152    IN      A       62.36.20.212
spf.orange.es.          1152    IN      A       62.36.20.213
spf.orange.es.          1152    IN      A       62.36.20.214
spf.orange.es.          1152    IN      A       62.36.20.215
spf.orange.es.          1152    IN      A       62.36.20.218
spf.orange.es.          1152    IN      A       62.36.20.219
spf.orange.es.          1152    IN      A       62.36.20.220
spf.orange.es.          1152    IN      A       62.36.20.230
spf.orange.es.          1152    IN      A       62.37.225.28
spf.orange.es.          1152    IN      A       62.37.225.29
spf.orange.es.          1152    IN      A       62.37.225.30
spf.orange.es.          1152    IN      A       62.37.236.9
spf.orange.es.          1152    IN      A       62.37.236.12
spf.orange.es.          1152    IN      A       62.37.236.13
spf.orange.es.          1152    IN      A       62.37.236.14
spf.orange.es.          1152    IN      A       62.37.236.60
spf.orange.es.          1152    IN      A       62.37.236.61
spf.orange.es.          1152    IN      A       62.37.236.63
spf.orange.es.          1152    IN      A       62.37.236.64
spf.orange.es.          1152    IN      A       62.37.236.67
spf.orange.es.          1152    IN      A       62.37.236.69
spf.orange.es.          1152    IN      A       62.37.236.82
spf.orange.es.          1152    IN      A       62.37.236.119
spf.orange.es.          1152    IN      A       62.37.236.185
spf.orange.es.          1152    IN      A       62.37.236.186
spf.orange.es.          1152    IN      A       62.37.236.187
spf.orange.es.          1152    IN      A       83.231.36.67
spf.orange.es.          1152    IN      A       62.36.20.139
spf.orange.es.          1152    IN      A       62.36.20.140
spf.orange.es.          1152    IN      A       62.36.20.169
spf.orange.es.          1152    IN      A       62.36.20.170
spf.orange.es.          1152    IN      A       62.36.20.201
spf.orange.es.          1152    IN      A       62.36.20.202
spf.orange.es.          1152    IN      A       62.36.20.203
spf.orange.es.          1152    IN      A       62.36.20.204
spf.orange.es.          1152    IN      A       62.36.20.205
spf.orange.es.          1152    IN      A       62.36.20.206
spf.orange.es.          1152    IN      A       62.36.20.207
spf.orange.es.          1152    IN      A       62.36.20.208
spf.orange.es.          1152    IN      A       62.36.20.209
spf.orange.es.          1152    IN      A       62.36.20.210

>From this server I can resolve this SPF record without problems (using TCP).

# spamassassin  -V
SpamAssassin version 3.2.5
  running on Perl version 5.10.0


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to