Re: smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved

2023-01-26 Thread Michael Breuer



> On 26. Jan 2023, at 15:17, giova...@paclan.it wrote:
> 
> On 1/26/23 13:58, Harald Dunkel wrote:
>> Hi folks,
>> smtpctl spfwalk returns messages like
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
>> and can't be resolved
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
>> and can't be resolved
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{i}._spf.corp.salesforce.com contains macros and 
>> can't be resolved
>> smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and 
>> can't be resolved
>> is this something the owner of the SPF record in DNS has to fix, is
>> this not implemented yet, or what is the story here?
> %{i} is a macro that is substituted at connection time and cannot be included 
> in a
> static list.
> There are only few domains that are using SPF macros afaik.
> Giovanni

In my case, there are quite a number of domains that use SPF macros. Out of 215 
domains I do SPF walk, 64 return macros.

Michael


Re: smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved

2023-01-26 Thread Tobias Fiebig
Heho,
i recently came about it for ibm.com, iirc, as well when implementing
SPF for a measurement tool. ;-)

With best regards,
Tobias



Re: smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved

2023-01-26 Thread giovanni

On 1/26/23 13:58, Harald Dunkel wrote:

Hi folks,

smtpctl spfwalk returns messages like

smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
and can't be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
and can't be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.corp.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved

is this something the owner of the SPF record in DNS has to fix, is
this not implemented yet, or what is the story here?


%{i} is a macro that is substituted at connection time and cannot be included 
in a
static list.
There are only few domains that are using SPF macros afaik.
 Giovanni


OpenPGP_signature
Description: OpenPGP digital signature


Re: smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved

2023-01-26 Thread Tassilo Philipp
If I understand correctly, this is part of the SPF spec. Those things 
are defined hard, e.g. %{i} is the source IP of the message, %{ir} is 
the same reversed, etc.. There are more, but it's a short list.


So, I guess this is simply not implemented in smtpctl spfwalk.

Btw... this is the first time I ever see this used in the wild, thanks 
for the pointer.


On Thu, Jan 26, 2023 at 01:58:45PM +0100, Harald Dunkel wrote:

Hi folks,

smtpctl spfwalk returns messages like

smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.corp.salesforce.com contains macros and can't be resolved 
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved


is this something the owner of the SPF record in DNS has to fix, is 
this not implemented yet, or what is the story here?



Every insightful comment is highly appreciated

Harri





smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't be resolved

2023-01-26 Thread Harald Dunkel

Hi folks,

smtpctl spfwalk returns messages like

smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
and can't be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{ir}.%{v}.%{d}.spf.has.pphosted.com contains macros 
and can't be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.corp.salesforce.com contains macros and can't 
be resolved
smtpctl: lookup_record: %{i}._spf.mta.salesforce.com contains macros and can't 
be resolved

is this something the owner of the SPF record in DNS has to fix, is
this not implemented yet, or what is the story here?


Every insightful comment is highly appreciated

Harri