>I'm going to try to find some time later today to play wasted time
Von: K Post <nntp.p...@gmail.com> An: ASSP development mailing list <assp-test@lists.sourceforge.net> Datum: 08.05.2015 17:53 Betreff: Re: [Assp-test] SPF record from DNS received in 2 lines probelm This tool: http://www.kitterman.com/spf/validate.html claims that the SPF record is fine, it also shows it on one line. It seems like the Windows DNS mechanism is splitting the results, or at least NSLOOKUP does. Does Mail::SPF use windows for DNS? Probably, I'd think. Does ASSP have access to an array of results from Mail::SPF::Query? Maybe they're supposed to be concatenated or something? Really just a wild guess. I'm going to try to find some time later today to play with the module, though I'm no perl wiz. On Fri, May 8, 2015 at 4:22 AM, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > > b.news.saksoff5th.com text = > > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > ip4:8.7.44.123/32 > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > 25.54.0/24 ip4:2" > > "08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > p4:63.236.31.128" > > "/26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > There is nothing to fix - everything is working OK. IMHO this SPF record > is simply wrong. > How should an SPF application know, that the second part is an addition to > the first part, if the first part is terminated ("). > It should be: > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > ip4:8.7.44.123/32 > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > 25.54.0/24 ip4:2 > > 08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > p4:63.236.31.128 > > /26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > The line processing is done by Mail::SPF not by ASSP! > > Thomas > > > > > Von: K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 07.05.2015 17:32 > Betreff: Re: [Assp-test] SPF record from DNS received in 2 lines > probelm > > > > This seems to be happening regularly - enough to be causing serious SPF > reliability errors > > Received-SPF: permerror (homedepot.com: Unknown mechanism type 'inclu' in > 'v=spf1' record) receiver=assp.OurCharity.org; identity=mailfrom; > envelope-from="homede...@homedepot.com"; helo=mail-ext.escalate.com; > client-ip=64.124.92.69 > > When I do a NSLookup in Windows 8 or Windows 2012, I see: > "v=spf1 ip4:207.11.40.24 ip4:207.11.40.25 ip4:207.11.27.104 > ip4:207.11.27.105 ip4:50.57.54.137 ip4:64.124.92.69 > a:smtp01.edifecs.com a:smtp02.edifecs.com include: > spf.messaging.microsoft.com include:cust-spf.exacttarget.com include:s > pf.mailengine1.com inclu" <--- note the quote and the line break > "de:spf.mtasv.net ~all" > > That "inclu" at the end of the line is interpreted as ASSP as invalid, > which it IS, but assp should be seeing that 2nd line that starts "de" to > make "include." Of course this seems like more of a problem with windows > DNS. It dosn't matter if I use internal windows DNS servers or Google's > (presumably Linux) 8.8.8.8 server. Same formatting of the results. > > Anyone else seeing this on windows? > > On Tue, May 5, 2015 at 10:22 AM, K Post <nntp.p...@gmail.com> wrote: > > > On my windows systems, when I do a NSLookup for the SPF record for > > b.news.saksoff5th.com, I get > > > b.news.saksoff5th.com > > Server: google-public-dns-a.google.com > > Address: 8.8.8.8 > > b.news.saksoff5th.com text = > > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > ip4:8.7.44.123/32 > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > 25.54.0/24 ip4:2" > > "08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > p4:63.236.31.128" > > "/26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > > > Looking at the mail analyzer, I get: > > Received-SPF: permerror (b.news.saksoff5th.com: Missing required IPv4 > > address in 'ip4:2') receiver=antispam.nexario.net; identity=mailfrom; > > envelope-from="bo-b9vk0mvatcv9czaumtyq5qcby69...@b.news.saksoff5th.com"; > > helo=mta954.news.saksoff5th.com; client-ip=8.7.44.125 > > > > So ASSP doesn't like ip4:2 which is't seeing at the end of line 1 of the > > DNS entry. > > > > I think this might be a windows problem. If I go here: > > > > > > http://mxtoolbox.com/SuperTool.aspx?action=txt%3ab.news.saksoff5th.com&run=toolpage > > > I see the entire record, without the line splits. > > > > Any chance of having ASSP combine records like this? I feel like it > could > > potentially be a problem for DKIM and DMARC records too, though I'm just > > guessing based on potential length, not experience. > > > > > > thanks > > > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
