On Saturday, February 5, 2022 8:48:22 AM EST Fourhundred Thecat wrote: > Hello, > > I am using python3-spf and I am getting following error from one host > trying to deliver email: > > policyd-spf: prepend Received-SPF: Temperror (mailfrom) > identity=mailfrom; client-ip=77.75.76.210; helo=mxd2.seznam.cz; > > full log here: https://ctxt.io/2/AABgmS4AFw > > What exactly is happening, and what does the Temperror mean? > > Originally I thought there might be temporary problem with DNS > resolution, but when i try on the mailserver, DNS seems to work finer > and lists the IP address as authorized: > > # host -t txt seznam.cz > seznam.cz descriptive text "v=spf1 mx ip4:77.75.78.0/23 > ip4:77.75.76.0/23 ip6:2a02:598::/32 ?all"
https://datatracker.ietf.org/doc/html/rfc7208#section-2.6.6 The policy server itself has the ability to produce more verbose logs that would likely make it clearer what is happening. If this was a one time problem, it may be that there was a temporary DNS issue when resolved itself. If it's an ongoing problem, I recommend making the policy server's log level higher to get a better idea of what's happening. Also it would be useful to know which version of python3-spf and the policy server you are using as will as if you are using py3dns (DNS module) or dnspython (dns module). Recent versions of pyspf support either, but there are some related bugs in older versions which might be relevant. Relative to the other suggestion of changing the Lookup_Time value, if 20 seconds isn't enough you probably have other issues that should be investigated. That would be a last resort kind of thing in my opinion. Scott K
