Running spamd with --debug=spf I'm getting some clues
In the spamd log, I'm seeing...
Aug 16 09:16:37 xxxxxx spamassassin[6390]: spf: cannot get Envelope-
From, cannot use SPF
But, after I receive the email and run it through, it has no problem
finding Envelope-From.
Anyone know what may be causing that? Something in how postfix
passes the message to spamc?
On Aug 16, 2005, at 7:35 AM, Steve Martin wrote:
I still have something strange going on that I can't figure out.
When your mail came this morning, it did NOT have SPF_PASS, but if
I run things manually now, I get it.
Here is what I'm seeing when I run things manually now...
The HELO fails like this...
[5056] dbg: spf: checking HELO (helo=xanadu.evi-inc.com,
ip=208.39.141.86)
[5056] dbg: spf: query for /208.39.141.86/xanadu.evi-inc.com:
result: none, comment: SPF: domain of sender xanadu.evi-i\
nc.com does not designate mailers
[5056] dbg: eval: all '*From' addrs: [EMAIL PROTECTED]
[5056] dbg: eval: forged-HELO: from=evitechnology.com helo=evi-
inc.com by=cheezmo.com
[5056] dbg: eval: forged-HELO: mismatch on HELO: 'evi-inc.com' !=
'evitechnology.com'
[5056] dbg: eval: forged-HELO: from=evitechnology.com helo=!
10.0.6.1! by=evi-inc.com
[5056] dbg: eval: forged-HELO: mismatch on from:
'evitechnology.com' != 'evi-inc.com'
[5056] dbg: rules: ran eval rule FORGED_RCVD_HELO ======> got hit
[5056] dbg: spf: checking EnvelopeFrom (helo=xanadu.evi-inc.com,
ip=208.39.141.86, [EMAIL PROTECTED])
[5056] dbg: spf: query for [EMAIL PROTECTED]/208.39.141.86/
xanadu.evi-inc.com: result: pass, comment: Please see htt\
p://spf.pobox.com/why.html?sender=mkettler%40evi-
inc.com&ip=208.39.141.86&receiver=closet.local: 208.39.141.80/28
conta\
ins 208.39.141.86
My listserver is NATed.
I do have trusted_networks declared.
--
Steve Martin http://www.cheezmo.com/
Smart Calibration, LLC http://www.smartcalibration.com/
The Widescreen Movie Center http://www.widemovies.com/
Letterboxed Movie TV Schedule http://www.widemovies.com/lbx.html
