[exim] Re: "No errors" in $spf_header_comment

[Patrik Peng via Exim-users]

Seems right, I found these strings in the libspf2 source:
https://www.libspf2.net/docs/html/spf__strerror_8c-source.html





deny: condition test failed in ACL "mail_acl"
processing "deny" (/usr/local/etc/exim/configure 311)
check spf = permerror
spf_process

spf_dns.c:66 Debug: DNS[cache] found record
spf_dns.c:69 Debug: DOMAIN: many-spf.hp-mail-infra-test-01.ch TYPE: SPF (99)
spf_dns.c:76 Debug: TTL: 1800 RR found: 0 herrno: 4 source: exim

spf_dns.c:66 Debug: DNS[cache] found record
spf_dns.c:69 Debug: DOMAIN: many-spf.hp-mail-infra-test-01.ch TYPE: TXT (16)
spf_dns.c:76 Debug: TTL: 1800 RR found: 2 herrno: 0 source: exim
spf_dns.c:94 Debug: - TXT: v=spf1 -all
spf_dns.c:94 Debug: - TXT: v=spf1 ~all

spf_server.c:457 Debug: found SPF record: v=spf1 -all
spf_server.c:457 Debug: found SPF record: v=spf1 ~all
warn_msg = (32) Multiple SPF records for 'many-spf.hp-mail-infra-test-01.ch'
SPF result is permerror (7)

l_message: SPF check failed: $spf_result - $spf_header_comment
deny: condition test succeeded in ACL "mail_acl"
end of ACL "mail_acl": DENY
SMTP>> 550-SPF check failed: permerror while checking
550-SPF check failed: permerror while checking
SMTP>> 550 many-spf.hp-mail-infra-test-01.ch
550 many-spf.hp-mail-infra-test-01.ch
LOG: MAIN REJECT

Since, there is a "SPF_E_MULTIPLE_RECORDS:" string in there, I guessed if there could be some issue in exims libspf2 integration or handling of the $spf_header_comment variable. Running an interactive debug session also reveals a "warn_msg" line, which seems to contain a corresponding error message: spf_dns.c:54 Debug: DNS[cache] lookup: many-spf.hp-mail-infra-test-01.ch SPF (99) spf_server.c:370 Debug: get_record(many-spf.hp-mail-infra-test-01.ch): NO_DATA spf_dns.c:54 Debug: DNS[cache] lookup: many-spf.hp-mail-infra-test-01.ch TXT (16) spf_server.c:412 Debug: get_record(many-spf.hp-mail-infra-test-01.ch): NETDB_SUCCESS message: SPF check failed: $spf_result while checking ${if def:sender_address_domain{$sender_address_domain}{$sender_helo_name}} H=(asdf.com) [1.1.1.1] rejected MAIL a...@many-spf.hp-mail-infra-test-01.ch: SPF check failed: permerror - mxin012.mail.hostpoint.ch: error in processing during lookup of domain of many-spf.hp-mail-infra-test-01.ch: No errors

OpenPGP_signature.asc
Description: OpenPGP digital signature

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/