>wasted time Okay, then what other options are there? More and more spf records seem to be long like this, and they're failing. (I know I could use a linux system, but the powers that be won't let me - because the commercial linux vendors don't support the OS for free for our charity like Microsoft does - super frustrating, but it's the deck of cards that I've been dealt)
On Fri, May 8, 2015 at 11:56 AM, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > >I'm going to try to find some time later today to play > > wasted time > > > > > > Von: K Post <nntp.p...@gmail.com> > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > Datum: 08.05.2015 17:53 > Betreff: Re: [Assp-test] SPF record from DNS received in 2 lines > probelm > > > > This tool: http://www.kitterman.com/spf/validate.html claims that the SPF > record is fine, it also shows it on one line. > > It seems like the Windows DNS mechanism is splitting the results, or at > least NSLOOKUP does. Does Mail::SPF use windows for DNS? Probably, I'd > think. > > Does ASSP have access to an array of results from Mail::SPF::Query? Maybe > they're supposed to be concatenated or something? Really just a wild > guess. I'm going to try to find some time later today to play with the > module, though I'm no perl wiz. > > > > > > > On Fri, May 8, 2015 at 4:22 AM, Thomas Eckardt > <thomas.ecka...@thockar.com> > wrote: > > > > b.news.saksoff5th.com text = > > > > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > > ip4:8.7.44.123/32 > > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > > 25.54.0/24 ip4:2" > > > "08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > > p4:63.236.31.128" > > > "/26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > > > There is nothing to fix - everything is working OK. IMHO this SPF record > > is simply wrong. > > How should an SPF application know, that the second part is an addition > to > > the first part, if the first part is terminated ("). > > It should be: > > > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > > ip4:8.7.44.123/32 > > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > > 25.54.0/24 ip4:2 > > > 08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > > p4:63.236.31.128 > > > /26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > > > The line processing is done by Mail::SPF not by ASSP! > > > > Thomas > > > > > > > > > > Von: K Post <nntp.p...@gmail.com> > > An: ASSP development mailing list <assp-test@lists.sourceforge.net> > > Datum: 07.05.2015 17:32 > > Betreff: Re: [Assp-test] SPF record from DNS received in 2 lines > > probelm > > > > > > > > This seems to be happening regularly - enough to be causing serious SPF > > reliability errors > > > > Received-SPF: permerror (homedepot.com: Unknown mechanism type 'inclu' > in > > 'v=spf1' record) receiver=assp.OurCharity.org; identity=mailfrom; > > envelope-from="homede...@homedepot.com"; helo=mail-ext.escalate.com; > > client-ip=64.124.92.69 > > > > When I do a NSLookup in Windows 8 or Windows 2012, I see: > > "v=spf1 ip4:207.11.40.24 ip4:207.11.40.25 ip4:207.11.27.104 > > ip4:207.11.27.105 ip4:50.57.54.137 ip4:64.124.92.69 > > a:smtp01.edifecs.com a:smtp02.edifecs.com include: > > spf.messaging.microsoft.com include:cust-spf.exacttarget.com include:s > > pf.mailengine1.com inclu" <--- note the quote and the line break > > "de:spf.mtasv.net ~all" > > > > That "inclu" at the end of the line is interpreted as ASSP as invalid, > > which it IS, but assp should be seeing that 2nd line that starts "de" to > > make "include." Of course this seems like more of a problem with > windows > > DNS. It dosn't matter if I use internal windows DNS servers or Google's > > (presumably Linux) 8.8.8.8 server. Same formatting of the results. > > > > Anyone else seeing this on windows? > > > > On Tue, May 5, 2015 at 10:22 AM, K Post <nntp.p...@gmail.com> wrote: > > > > > On my windows systems, when I do a NSLookup for the SPF record for > > > b.news.saksoff5th.com, I get > > > > b.news.saksoff5th.com > > > Server: google-public-dns-a.google.com > > > Address: 8.8.8.8 > > > b.news.saksoff5th.com text = > > > > > > "v=spf1 ip4:63.232.236.204/30 ip4:8.7.44.124/31 > > ip4:8.7.44.123/32 > > > ip4:8.7.44.126/32 ip4:207.251.96.0/24 ip4:65.1 > > > 25.54.0/24 ip4:2" > > > "08.49.63.128/28 ip4:63.211.90.16/29 ip4:8.7.42.16/29 ip4: > > > 8.7.43.16/29 ip4:63.232.236.144/29 ip4:8.7.44.144/29 i > > > p4:63.236.31.128" > > > "/26 ip4:63.236.76.0/23 ip4:8.30.201.0/26 ~all" > > > > > > Looking at the mail analyzer, I get: > > > Received-SPF: permerror (b.news.saksoff5th.com: Missing required IPv4 > > > address in 'ip4:2') receiver=antispam.nexario.net; identity=mailfrom; > > > > envelope-from="bo-b9vk0mvatcv9czaumtyq5qcby69...@b.news.saksoff5th.com"; > > > helo=mta954.news.saksoff5th.com; client-ip=8.7.44.125 > > > > > > So ASSP doesn't like ip4:2 which is't seeing at the end of line 1 of > the > > > DNS entry. > > > > > > I think this might be a windows problem. If I go here: > > > > > > > > > > > > http://mxtoolbox.com/SuperTool.aspx?action=txt%3ab.news.saksoff5th.com&run=toolpage > > > > > > I see the entire record, without the line splits. > > > > > > Any chance of having ASSP combine records like this? I feel like it > > could > > > potentially be a problem for DKIM and DMARC records too, though I'm > just > > > guessing based on potential length, not experience. > > > > > > > > > thanks > > > > > > > > > ------------------------------------------------------------------------------ > > One dashboard for servers and applications across Physical-Virtual-Cloud > > Widest out-of-the-box monitoring support with 50+ applications > > Performance metrics, stats and reports that give you Actionable Insights > > Deep dive visibility with transaction tracing using APM Insight. > > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > > _______________________________________________ > > Assp-test mailing list > > Assp-test@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > > > > > > > > > > DISCLAIMER: > > ******************************************************* > > This email and any files transmitted with it may be confidential, > legally > > privileged and protected in law and are intended solely for the use of > the > > > > individual to whom it is addressed. > > This email was multiple times scanned for viruses. There should be no > > known virus in this email! > > ******************************************************* > > > > > > > > ------------------------------------------------------------------------------ > > One dashboard for servers and applications across Physical-Virtual-Cloud > > Widest out-of-the-box monitoring support with 50+ applications > > Performance metrics, stats and reports that give you Actionable Insights > > Deep dive visibility with transaction tracing using APM Insight. > > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > > _______________________________________________ > > Assp-test mailing list > > Assp-test@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
