Hi,

I've observed the following behaviour with the sender_permitted_from plugin
and wanted to check if this is the desired behavior, or should the SPF
plugin be more graceful in handling this instance of weirdness:

First the error (edited to protect the innocent! ;-)

2007-11-27 13:32 20088 Plugin sender_permitted_from, hook rcpt returned
DENYSOFT, SPF error: SPF record error: DNS error while looking up
mail.someones-domain-name.com A: query timed out

A lookup of "mail.someones-domain-name.com"  returns a CNAME pointing back
to itself! (ie: mail.someones-domain-name.com )

The origin of the hostname "mail.someones-domain-name.com" is the rDNS of
the connecting IP. I assume SPF was now trying to forward resolve the
hostname back to an IP when this CNAME that points back to itself was
uncovered, causing the timeout error.

No question the DNS entry for this domain is broken, but the question is;
should this be how the SPF plugin handles this kind of error?

Thanks,

-Rob

Reply via email to