https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7805
--- Comment #13 from hnsupport <[email protected]> --- (In reply to RW from comment #12) > You appear to have 192.254.118.54 in your trusted_networks, and since you > haven't defined internal_networks explicitly, it gets copied from > trusted_networks. Presumably you haven't added the private address ranges to > trusted_networks which makes 10.30.65.95 look like the last-external IP > address. > > Others see the spf pass because they don't have 192.254.118.54 in > internal_networks, and so, correctly, see that IP address as last-external. (In reply to Kevin A. McGrail from comment #11) > On my 2 systems, init.pre is where the SPF plugin is loaded > > On my key test rig SPF passes. > > What is your glue for calling spamassassin > > Here's the output that matches the word SPF for your review: > > Apr 6 19:54:28.295 [8453] dbg: check: tagrun - tag DKIMDOMAIN is still > blocking action 1 > Apr 6 19:54:28.306 [8453] dbg: plugin: > Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x94faff0) implements > 'finish_tests', priority 0 > Apr 6 19:54:28.306 [8453] dbg: plugin: > Mail::SpamAssassin::Plugin::Check=HASH(0x9588a90) implements 'finish_tests', > priority 0 > Apr 6 19:54:28.444 [8453] dbg: netset: cache trusted_networks > hits/attempts: 25/26, 96.2 % > Press any key to continue... > Apr 6 19:55:16.614 [8828] dbg: plugin: loading > Mail::SpamAssassin::Plugin::SPF from @INC > Apr 6 19:55:17.959 [8828] dbg: config: fixed relative path: > /var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf > Apr 6 19:55:17.959 [8828] dbg: config: using > "/var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf" for > included file > Apr 6 19:55:17.960 [8828] dbg: config: read file > /var/lib/spamassassin/3.004004/updates_spamassassin_org/25_spf.cf > Apr 6 19:55:18.243 [8828] dbg: config: fixed relative path: > /var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf.cf > Apr 6 19:55:18.243 [8828] dbg: config: using > "/var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf. > cf" for included file > Apr 6 19:55:18.243 [8828] dbg: config: read file > /var/lib/spamassassin/3.004004/updates_spamassassin_org/60_whitelist_spf.cf > Apr 6 19:55:20.552 [8828] dbg: config: warning: no description set for > FROM_MISSP_SPF_FAIL > Apr 6 19:55:20.597 [8828] dbg: config: warning: no description set for > FORGED_SPF_HELO > Apr 6 19:55:22.549 [8828] dbg: askdns: depend on tags SENDERDOMAIN, rules: > JMQ_SPF_ALL, __PDS_SPF_ONLYALL, PDS_SPF_NONE, PDS_SPF_ALL, JMQ_SPF_NEUTRAL, > PDS_SPF_ONLYALL > Apr 6 19:55:22.549 [8828] dbg: askdns: query template _SENDERDOMAIN_, type > TXT, rules: JMQ_SPF_ALL, __PDS_SPF_ONLYALL, PDS_SPF_NONE, PDS_SPF_ALL, > JMQ_SPF_NEUTRAL, PDS_SPF_ONLYALL > Apr 6 19:55:23.825 [8828] dbg: spf: checking to see if the message has a > Received-SPF header that we can use > Apr 6 19:55:23.908 [8828] dbg: spf: using Mail::SPF for SPF checks > Apr 6 19:55:23.909 [8828] dbg: spf: checking HELO > (helo=o2.email.wetransfer.com, ip=192.254.118.54) > Apr 6 19:55:23.913 [8828] dbg: dns: providing a callback for id: > 32395/IN/SPF/o2.email.wetransfer.com > Apr 6 19:55:23.923 [8828] dbg: spf: query for > /192.254.118.54/o2.email.wetransfer.com: result: none, comment: , text: No > applicable sender policy available > Apr 6 19:55:24.093 [8828] dbg: spf: already checked for Received-SPF > headers, proceeding with DNS based checks > Apr 6 19:55:24.093 [8828] dbg: spf: found Envelope-From in first external > Received header > Apr 6 19:55:24.093 [8828] dbg: spf: checking EnvelopeFrom > (helo=o2.email.wetransfer.com, ip=192.254.118.54, > envfrom=bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email. > wetransfer.com) > Apr 6 19:55:24.097 [8828] dbg: dns: providing a callback for id: > 9080/IN/SPF/em9713.email.wetransfer.com > Apr 6 19:55:24.182 [8828] dbg: spf: query for > bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email. > wetransfer.com/192.254.118.54/o2.email.wetransfer.com: result: pass, > comment: , text: Mechanism 'ip4:192.254.118.54' matched > Apr 6 19:55:24.189 [8828] dbg: rules: ran eval rule SPF_PASS ======> got > hit (1) > Apr 6 19:55:24.227 [8828] dbg: spf: def_whitelist_from_spf: > bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email. > wetransfer.com is not in DEF_WHITELIST_FROM_SPF > Apr 6 19:55:24.239 [8828] dbg: spf: whitelist_from_spf: > bounces+922094-0e6c-juridico1=fernangonzalezabogados.es@em9713.email. > wetransfer.com is not in user's WHITELIST_FROM_SPF > Apr 6 19:55:27.112 [8828] dbg: auto-whitelist: sql-based get_addr_entry: > found 1 entries for [email protected]|spf > Apr 6 19:55:27.113 [8828] dbg: auto-whitelist: sql-based > [email protected]|spf scores -3.56, msgcount 4 > Apr 6 19:55:27.118 [8828] dbg: auto-whitelist: sql-based add_score/insert > root|[email protected]|none|1|-0.89|spf: SQL error: Duplicate entry > '[email protected]' for key 'PRIMARY' > Apr 6 19:55:27.122 [8828] dbg: auto-whitelist: sql-based add_score/update > new msgcount: 5, new totscore: -4.45 for > 5|-0.89|root|[email protected]|spf|none > Apr 6 19:55:27.126 [8828] dbg: auto-whitelist: sql-based get_addr_entry: > found 1 entries for wetransfer.com|spf > Apr 6 19:55:27.126 [8828] dbg: auto-whitelist: sql-based wetransfer.com|spf > scores -3.56, msgcount 4 > Apr 6 19:55:27.131 [8828] dbg: auto-whitelist: sql-based add_score/insert > root|wetransfer.com|none|1|-0.89|spf: SQL error: Duplicate entry > 'root-wetransfer.com-spf-none' for key 'PRIMARY' > Apr 6 19:55:27.135 [8828] dbg: auto-whitelist: sql-based add_score/update > new msgcount: 5, new totscore: -4.45 for 5|-0.89|root|wetransfer.com|spf|none > Apr 6 19:55:27.176 [8828] dbg: check: > tests=DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS, > KAM_REALLYHUGEIMGSRC,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, > RCVD_IN_SENDERSCORE_90_100,SPF_PASS,UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY > Apr 6 19:55:27.182 [8828] dbg: timing: total 10639 ms - init: 5581 (52.5%), > parse: 21 (0.2%), extract_message_metadata: 420 (3.9%), get_uri_detail_list: > 31 (0.3%), tests_pri_-1000: 532 (5.0%), compile_gen: 725 (6.8%), > compile_eval: 137 (1.3%), tests_pri_-950: 19 (0.2%), tests_pri_-900: 19 > (0.2%), tests_pri_-100: 45 (0.4%), tests_pri_-90: 17 (0.2%), tests_pri_0: > 2820 (26.5%), check_spf: 189 (1.8%), poll_dns_idle: 9 (0.1%), > dkim_load_modules: 77 (0.7%), check_dkim_signature: 29 (0.3%), > check_dkim_adsp: 12 (0.1%), wait_for_pending_rules: 0.58 (0.0%), > tests_pri_20: 323 (3.0%), check_razor2: 304 (2.9%), tests_pri_30: 18 (0.2%), > check_pyzor: 1.04 (0.0%), tests_pri_500: 511 (4.8%), tests_pri_1000: 130 > (1.2%), total_txrep: 110 (1.0%), check_txrep_email_ip: 7 (0.1%), > update_txrep_email_ip: 7 (0.1%), check_txrep_domain: 5 (0.0%), > update_txrep_domain: 7 (0.1%), check_txrep_helo: 4.8 (0.0%), > update_txrep_helo: 6 (0.1%), check_txrep_ip: 4.5 (0.0%), update_txrep_ip: 6 > (0.1%) > RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS, > Filter Tests: > DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_REALLYHUGEIMGSRC, > RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS, > UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY > Content analysis details: (1.9 points, -100.0 required) > -0.0 SPF_PASS SPF: sender matches SPF record > 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict > Filter Tests: > DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_REALLYHUGEIMGSRC, > RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SENDERSCORE_90_100,SPF_PASS, > UNPARSEABLE_RELAY,UNWANTED_LANGUAGE_BODY > Content analysis details: (1.9 points, -100.0 required) > -0.0 SPF_PASS SPF: sender matches SPF record I'm just inputting the email to spamassassin -D to get the output I provided. -- You are receiving this mail because: You are the assignee for the bug.
