I'll investigate that, but spfwalk isn't a real SPF resolver and may yield incorrect results, it just helps a bit.
September 30, 2019 4:27 PM, "Nick Ryan" <n...@nr.ie> wrote: > Seems to work fine for some hosts but not gmail.com or outlook.com > > mail3$ smtpctl spf walk < 1 (this is gmail.com) > 35.190.247.0/24 > 64.233.160.0/19 > > mail3$ ./spf gmail.com 35.190.247.3 <- in the output of spfwalk > checking if 35.190.247.3 can send for gmail.com: EXISTS: 0 > EXISTS: 0 > EXISTS: 0 > soft-fail > > mail3$ ./spf gmail.com 185.185.185.185 <- made up address > checking if 185.185.185.185 can send for gmail.com: EXISTS: 0 > EXISTS: 0 > EXISTS: 0 > soft-fail > > mail3$ ./spf poolp.org 45.76.46.201 > checking if 45.76.46.201 can send for poolp.org: pass > mail3$ ./spf poolp.org 45.76.46.202 > checking if 45.76.46.202 can send for poolp.org: fail > > Regards - Nick > > On 30/09/2019 14:55, gil...@poolp.org wrote: > >> Hello, >> I'd like to bring native support for SPF in OpenSMTPD in a future > release, >> but for this I need a bit of help to make sure my SPF resolver works > fine. >> I have created a repository with a standalone executable that performs > the >> SPF lookup and checks if an IP address is allowed to send on behalf of > the >> sending domain: >> https://github.com/poolpOrg/spf >> https://github.com/poolpOrg/spf/blob/master/README.md >>> If you could test and report issues, it would be nice,
