https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8021
Bug ID: 8021
Summary: SPF false positives
Product: Spamassassin
Version: 3.4.6
Hardware: PC
OS: Linux
Status: NEW
Severity: major
Priority: P2
Component: Libraries
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: Undefined
Hello,
I am using Spamassassin v3.4.6-1, installed from the Debian Bulleyes
repositories.
I have SPF errors for domains that have a valid SPF record consistent with the
sending address:
spamd[3561832]: spf: using Mail::SPF for SPF checks
spamd[3561832]: spf: checking EnvelopeFrom (helo=massgateway3c.dhl.com,
ip=165.72.200.106, [email protected])
spamd[3561832]: dns: reply to 11241/IN/TXT/dhl.com truncated (EDNS 65535
bytes), 0 answer records
spamd[3561832]: dns: reply to 12708/IN/TXT/dhl.com truncated (EDNS 65535
bytes), 0 answer records
spamd[3561832]: spf: query for
[email protected]/165.72.200.106/massgateway3c.dhl.com: result: none, comment: ,
text: No applicable sender policy available
The same query sent directly from the command line via Mail::SPF is still
valid:
# spfquery --scope mfrom --id [email protected] --ip 165.72.200.106
pass
dhl.com: Sender is authorized to use '[email protected]' in 'mfrom' identity
(mechanism 'include:dpdhl._spf.dhl.com' matched)
dhl.com: Sender is authorized to use '[email protected]' in 'mfrom' identity
(mechanism 'include:dpdhl._spf.dhl.com' matched)
Received-SPF: pass (dhl.com: Sender is authorized to use '[email protected]' in
'mfrom' identity (mechanism 'include:dpdhl._spf.dhl.com' matched))
receiver=d44.altospam.com; identity=mailfrom; envelope-from="[email protected]";
client-ip=165.72.200.106
>From what I can see, this error occurs when the response to the DNS query is
too long and is therefore truncated.
I have tried increasing the buffer size and forcing the use of "Mail::SPF" in
"local.cf":
do_not_use_mail_spf 0
do_not_use_mail_spf_query 1
dns_options edns=65535
No change.
I don't know if the problem is in "Mail::SpamAssassin::Plugin::SPF", in
"Mail::SPF" or in another library. I confess I don't know where to look
anymore.
--
You are receiving this mail because:
You are the assignee for the bug.
