After seeing all the SPF discussion lately I decided to actually ask you
guys about this problem.

I have many whitelist_from_spf entries where I usually keep my whitelist
entries.  For some reason, I have never seen a hit on
USER_IN_SPF_WHITELIST.  I have received plenty of emails that I believe
should have hit.  Here are some example entries:

whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]

After further investigation I notice that I have plenty of SPF_HELO_*
hits, but no SPF_* hits.  I assume this issue is probably related to the
other.  What is the difference between SPF_HELO rules and the plain SPF
versions?  Why would I not be seeing any hits on the non-HELO ones?

I have trusted_networks configured correctly.  I have the plugin enabled
and I see no errors with a spamassassin --lint -D.  All the SPF
dependencies are loaded.  I am using SA 3.1 / sa-exim / exim 4.60 /
Debian 3.1.

I really have no idea on how to proceed from here.  How does one test
the SPF tests and get debug output on it?

Here is some debug output that may or may not be useful:
/# spamassassin --lint -D 2>&1 | grep -i spf
[29944] dbg: diag: module installed: Mail::SPF::Query, version 1.997
[29944] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[29944] dbg: config: read file
/usr/share/spamassassin/60_whitelist_spf.cf
[29944] dbg: config: read file
/etc/spamassassin/70_sare_whitelist_spf.cf
[29944] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[29944] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310)
[29944] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: spf: message was delivered entirely via trusted relays, not
required
[29944] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: spf: message was delivered entirely via trusted relays, not
required
[29944] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: plugin: registering glue method for
check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: spf: cannot get Envelope-From, cannot use SPF
[29944] dbg: spf: def_spf_whitelist_from: could not find useable
envelope sender
[29944] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x92ea310))
[29944] dbg: spf: spf_whitelist_from: could not find useable envelope
sender

Thanks,
Kris

Reply via email to