https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7805

--- Comment #13 from hnsupport <[email protected]> ---
(In reply to RW from comment #12)
> You appear to have 192.254.118.54 in your trusted_networks, and since you
> haven't defined internal_networks explicitly, it gets copied from
> trusted_networks. Presumably you haven't added the private address ranges to
> trusted_networks which makes 10.30.65.95 look like the last-external IP
> address.
> 
> Others see the spf pass because they don't have 192.254.118.54 in
> internal_networks, and so, correctly, see that IP address as last-external.

(In reply to Kevin A. McGrail from comment #11)
> On my 2 systems, init.pre is where the SPF plugin is loaded
> 
> On my key test rig SPF passes.
> 
> What is your glue for calling spamassassin
> 
> Here's the output that matches the word SPF for your review:
> 
> Apr  6 19:54:28.295 [8453] dbg: check: tagrun - tag DKIMDOMAIN is still
> blocking action 1
> Apr  6 19:54:28.306 [8453] dbg: plugin:
> Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x94faff0) implements
> 'finish_tests', priority 0
> Apr  6 19:54:28.306 [8453] dbg: plugin:
> Mail::SpamAssassin::Plugin::Check=HASH(0x9588a90) implements 'finish_tests',
> priority 0
> Apr  6 19:54:28.444 [8453] dbg: netset: cache trusted_networks
> hits/attempts: 25/26, 96.2 %
> Press any key to continue...
> Apr  6 19:55:16.614 [8828] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::SPF from @INC
> Apr  6 19:55:17.959 [8828] dbg: config: fixed relative path:
> /var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf
> Apr  6 19:55:17.959 [8828] dbg: config: using
> "/var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf" for
> included file
> Apr  6 19:55:17.960 [8828] dbg: config: read file
> /var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf
> Apr  6 19:55:18.243 [8828] dbg: config: fixed relative path:
> /var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf.cf
> Apr  6 19:55:18.243 [8828] dbg: config: using
> "/var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf.
> cf" for included file
> Apr  6 19:55:18.243 [8828] dbg: config: read file
> /var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf.cf
> Apr  6 19:55:20.552 [8828] dbg: config: warning: no description set for
> FROM_MISSP_SPF_FAIL
> Apr  6 19:55:20.597 [8828] dbg: config: warning: no description set for
> FORGED_SPF_HELO
> Apr  6 19:55:22.549 [8828] dbg: askdns: depend on tags SENDERDOMAIN, rules:
> JMQ_SPF_ALL, __PDS_SPF_ONLYALL, PDS_SPF_NONE, PDS_SPF_ALL, JMQ_SPF_NEUTRAL,
> PDS_SPF_ONLYALL 
> Apr  6 19:55:22.549 [8828] dbg: askdns: query template _SENDERDOMAIN_, type
> TXT, rules: JMQ_SPF_ALL, __PDS_SPF_ONLYALL, PDS_SPF_NONE, PDS_SPF_ALL,
> JMQ_SPF_NEUTRAL, PDS_SPF_ONLYALL
> Apr  6 19:55:23.825 [8828] dbg: spf: checking to see if the message has a
> Received-SPF header that we can use
> Apr  6 19:55:23.908 [8828] dbg: spf: using Mail::SPF for SPF checks
> Apr  6 19:55:23.909 [8828] dbg: spf: checking HELO
> (helo=o2.email.wetransfer.com, ip=192.254.118.54)
> Apr  6 19:55:23.913 [8828] dbg: dns: providing a callback for id:
> 32395/IN/SPF/o2.email.wetransfer.com
> Apr  6 19:55:23.923 [8828] dbg: spf: query for
> /192.254.118.54/o2.email.wetransfer.com: result: none, comment: , text: No
> applicable sender policy available
> Apr  6 19:55:24.093 [8828] dbg: spf: already checked for Received-SPF
> headers, proceeding with DNS based checks
> Apr  6 19:55:24.093 [8828] dbg: spf: found Envelope-From in first external
> Received header
> Apr  6 19:55:24.093 [8828] dbg: spf: checking EnvelopeFrom
> (helo=o2.email.wetransfer.com, ip=192.254.118.54,
> envfrom=bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email.
> wetransfer.com)
> Apr  6 19:55:24.097 [8828] dbg: dns: providing a callback for id:
> 9080/IN/SPF/em9713.email.wetransfer.com
> Apr  6 19:55:24.182 [8828] dbg: spf: query for
> bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email.
> wetransfer.com/192.254.118.54/o2.email.wetransfer.com: result: pass,
> comment: , text: Mechanism 'ip4:192.254.118.54' matched
> Apr  6 19:55:24.189 [8828] dbg: rules: ran eval rule SPF_PASS ======> got
> hit (1)
> Apr  6 19:55:24.227 [8828] dbg: spf: def_whitelist_from_spf:
> bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email.
> wetransfer.com is not in DEF_WHITELIST_FROM_SPF
> Apr  6 19:55:24.239 [8828] dbg: spf: whitelist_from_spf:
> bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email.
> wetransfer.com is not in user's WHITELIST_FROM_SPF
> Apr  6 19:55:27.112 [8828] dbg: auto-whitelist: sql-based get_addr_entry:
> found 1 entries for [email protected]|spf
> Apr  6 19:55:27.113 [8828] dbg: auto-whitelist: sql-based
> [email protected]|spf scores -3.56, msgcount 4
> Apr  6 19:55:27.118 [8828] dbg: auto-whitelist: sql-based add_score/insert
> root|[email protected]|none|1|-0.89|spf: SQL error: Duplicate entry
> '[email protected]' for key 'PRIMARY'
> Apr  6 19:55:27.122 [8828] dbg: auto-whitelist: sql-based add_score/update
> new msgcount: 5, new totscore: -4.45 for
> 5|-0.89|root|[email protected]|spf|none
> Apr  6 19:55:27.126 [8828] dbg: auto-whitelist: sql-based get_addr_entry:
> found 1 entries for wetransfer.com|spf
> Apr  6 19:55:27.126 [8828] dbg: auto-whitelist: sql-based wetransfer.com|spf
> scores -3.56, msgcount 4
> Apr  6 19:55:27.131 [8828] dbg: auto-whitelist: sql-based add_score/insert
> root|wetransfer.com|none|1|-0.89|spf: SQL error: Duplicate entry
> 'root-wetransfer.com-spf-none' for key 'PRIMARY'
> Apr  6 19:55:27.135 [8828] dbg: auto-whitelist: sql-based add_score/update
> new msgcount: 5, new totscore: -4.45 for 5|-0.89|root|wetransfer.com|spf|none
> Apr  6 19:55:27.176 [8828] dbg: check:
> tests=DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,
> KAM_REALLYHUGEIMGSRC,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,
> RCVD_IN_SENDERSCORE_90_100,SPF_PASS,UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY
> Apr  6 19:55:27.182 [8828] dbg: timing: total 10639 ms - init: 5581 (52.5%),
> parse: 21 (0.2%), extract_message_metadata: 420 (3.9%), get_uri_detail_list:
> 31 (0.3%), tests_pri_-1000: 532 (5.0%), compile_gen: 725 (6.8%),
> compile_eval: 137 (1.3%), tests_pri_-950: 19 (0.2%), tests_pri_-900: 19
> (0.2%), tests_pri_-100: 45 (0.4%), tests_pri_-90: 17 (0.2%), tests_pri_0:
> 2820 (26.5%), check_spf: 189 (1.8%), poll_dns_idle: 9 (0.1%),
> dkim_load_modules: 77 (0.7%), check_dkim_signature: 29 (0.3%),
> check_dkim_adsp: 12 (0.1%), wait_for_pending_rules: 0.58 (0.0%),
> tests_pri_20: 323 (3.0%), check_razor2: 304 (2.9%), tests_pri_30: 18 (0.2%),
> check_pyzor: 1.04 (0.0%), tests_pri_500: 511 (4.8%), tests_pri_1000: 130
> (1.2%), total_txrep: 110 (1.0%), check_txrep_email_ip: 7 (0.1%),
> update_txrep_email_ip: 7 (0.1%), check_txrep_domain: 5 (0.0%),
> update_txrep_domain: 7 (0.1%), check_txrep_helo: 4.8 (0.0%),
> update_txrep_helo: 6 (0.1%), check_txrep_ip: 4.5 (0.0%), update_txrep_ip: 6
> (0.1%)
>         RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS,
> Filter Tests:
> DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_REALLYHUGEIMGSRC,
> RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS,
> UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY
> Content analysis details:   (1.9 points, -100.0 required)
> -0.0 SPF_PASS               SPF: sender matches SPF record
>  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
> Filter Tests:
> DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_REALLYHUGEIMGSRC,
> RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS,
> UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY
> Content analysis details:   (1.9 points, -100.0 required)
> -0.0 SPF_PASS               SPF: sender matches SPF record

I'm just inputting the email to spamassassin -D to get the output I provided.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to