Re: SPF confusion

2015-07-16 Thread Bowie Bailey
On 7/16/2015 4:04 AM, Reindl Harald wrote: Am 15.07.2015 um 23:21 schrieb Bowie Bailey: I still don't understand the query for sr03a.SMTPNA11.rrdesp.com. That is a sending server parsed from one of the Received lines. What is the expected result of checking SPF on a mail server address? http

Re: SPF confusion

2015-07-16 Thread Reindl Harald
Am 15.07.2015 um 23:21 schrieb Bowie Bailey: I still don't understand the query for sr03a.SMTPNA11.rrdesp.com. That is a sending server parsed from one of the Received lines. What is the expected result of checking SPF on a mail server address? http://www.openspf.org/FAQ/Common_mistakes#helo

Re: SPF confusion

2015-07-15 Thread Dave Warren
On 2015-07-15 23:49, Matus UHLAR - fantomas wrote: On 2015-07-15 13:53, David Jones wrote: I have seen Microsoft Exchange servers use the header From: domain instead of the envelope-from but this does not follow RFC 4408 spec. On 15.07.15 15:06, Dave Warren wrote: This is valid under Sender-ID

Re: SPF confusion

2015-07-15 Thread Matus UHLAR - fantomas
On 2015-07-15 13:53, David Jones wrote: I have seen Microsoft Exchange servers use the header From: domain instead of the envelope-from but this does not follow RFC 4408 spec. On 15.07.15 15:06, Dave Warren wrote: This is valid under Sender-ID, which was Microsoft's attempt at SPF version 2. I

Re: SPF confusion

2015-07-15 Thread Dave Warren
On 2015-07-15 13:53, David Jones wrote: I have seen Microsoft Exchange servers use the header From: domain instead of the envelope-from but this does not follow RFC 4408 spec. This is valid under Sender-ID, which was Microsoft's attempt at SPF version 2. It has since died a (deserved) death, a

Re: SPF confusion

2015-07-15 Thread David B Funk
On Wed, 15 Jul 2015, Bill Cole wrote: [snip..] SPF is NEVER appropriate for use to check the domain part of the "From:" header or any other header not KNOWN to be added by a trusted MTA and to contain the Envelope-From address. For example, many MTAs prepend a "Return-Path" header when passin

Re: SPF confusion

2015-07-15 Thread Bowie Bailey
On 7/15/2015 5:21 PM, Bowie Bailey wrote: On 7/15/2015 4:50 PM, Bill Cole wrote: On 15 Jul 2015, at 15:52, Bowie Bailey wrote: I am trying to use whitelist_auth to whitelist emails from staplesbilling.com. This should work, as they have an SPF record: $ dig staplesbilling.com txt +short "v=

Re: SPF confusion

2015-07-15 Thread Bowie Bailey
On 7/15/2015 4:50 PM, Bill Cole wrote: On 15 Jul 2015, at 15:52, Bowie Bailey wrote: I am trying to use whitelist_auth to whitelist emails from staplesbilling.com. This should work, as they have an SPF record: $ dig staplesbilling.com txt +short "v=spf1 a:hosts.rrdesp.com -all" $ dig hosts.r

Re: SPF confusion

2015-07-15 Thread Benny Pedersen
On July 15, 2015 10:38:34 PM Bowie Bailey wrote: Why doesn't SA check SPF for the From header? Isn't the whole point of SPF to be able to link the From address to a list of servers allowed to send mail from that address? SPF is NOT From: header and have never been it What you like to have t

Re: SPF confusion

2015-07-15 Thread David B Funk
On Wed, 15 Jul 2015, David Jones wrote: From: Bowie Bailey On 7/15/2015 4:04 PM, Kevin A. McGrail wrote: Why is it looking for an SPF record for rrdesp.com? That is the sending server, shouldn't it be using the domain from the From or Envelope-From instead? This SPF check looks backwards t

Re: SPF confusion

2015-07-15 Thread David Jones
>From: Bowie Bailey >On 7/15/2015 4:04 PM, Kevin A. McGrail wrote: >>> Why is it looking for an SPF record for rrdesp.com? That is the >>> sending server, shouldn't it be using the domain from the From or >>> Envelope-From instead? This SPF check looks backwards to me. Am I >>> missing somethi

Re: SPF confusion

2015-07-15 Thread David B Funk
On Wed, 15 Jul 2015, Bowie Bailey wrote: On 7/15/2015 4:04 PM, Kevin A. McGrail wrote: Why is it looking for an SPF record for rrdesp.com? That is the sending server, shouldn't it be using the domain from the From or Envelope-From instead? This SPF check looks backwards to me. Am I missing

Re: SPF confusion

2015-07-15 Thread David B Funk
On Wed, 15 Jul 2015, Bowie Bailey wrote: I am trying to use whitelist_auth to whitelist emails from staplesbilling.com. This should work, as they have an SPF record: $ dig staplesbilling.com txt +short "v=spf1 a:hosts.rrdesp.com -all" $ dig hosts.rrdesp.com a +short 162.27.43.121 162.27.247.1

Re: SPF confusion

2015-07-15 Thread Bill Cole
On 15 Jul 2015, at 15:52, Bowie Bailey wrote: I am trying to use whitelist_auth to whitelist emails from staplesbilling.com. This should work, as they have an SPF record: $ dig staplesbilling.com txt +short "v=spf1 a:hosts.rrdesp.com -all" $ dig hosts.rrdesp.com a +short 162.27.43.121 162.27.

Re: SPF confusion

2015-07-15 Thread Kevin A. McGrail
On 7/15/2015 4:37 PM, Bowie Bailey wrote: staplesbilling.com actually uses DKIM, but it always comes up as invalid by the time SA sees it, so that isn't particularly useful. I managed to get my MTA to add a Received-SPF header, but SA ignores it - presumably because the MTA puts it at the botto

Re: SPF confusion

2015-07-15 Thread Bowie Bailey
On 7/15/2015 4:04 PM, Kevin A. McGrail wrote: Why is it looking for an SPF record for rrdesp.com? That is the sending server, shouldn't it be using the domain from the From or Envelope-From instead? This SPF check looks backwards to me. Am I missing something? No, you are on the right path.

Re: SPF confusion

2015-07-15 Thread Kevin A. McGrail
Why is it looking for an SPF record for rrdesp.com? That is the sending server, shouldn't it be using the domain from the From or Envelope-From instead? This SPF check looks backwards to me. Am I missing something? No, you are on the right path. SPF checks the envelope not the From: Header.