I still have something strange going on that I can't figure out.
When your mail came this morning, it did NOT have SPF_PASS, but if I
run things manually now, I get it.
Here is what I'm seeing when I run things manually now...
The HELO fails like this...
[5056] dbg: spf: checking HELO (helo=xanadu.evi-inc.com,
ip=208.39.141.86)
[5056] dbg: spf: query for /208.39.141.86/xanadu.evi-inc.com: result:
none, comment: SPF: domain of sender xanadu.evi-i\
nc.com does not designate mailers
[5056] dbg: eval: all '*From' addrs: [EMAIL PROTECTED]
[5056] dbg: eval: forged-HELO: from=evitechnology.com helo=evi-
inc.com by=cheezmo.com
[5056] dbg: eval: forged-HELO: mismatch on HELO: 'evi-inc.com' !=
'evitechnology.com'
[5056] dbg: eval: forged-HELO: from=evitechnology.com helo=!10.0.6.1!
by=evi-inc.com
[5056] dbg: eval: forged-HELO: mismatch on from: 'evitechnology.com' !
= 'evi-inc.com'
[5056] dbg: rules: ran eval rule FORGED_RCVD_HELO ======> got hit
[5056] dbg: spf: checking EnvelopeFrom (helo=xanadu.evi-inc.com,
ip=208.39.141.86, [EMAIL PROTECTED])
[5056] dbg: spf: query for [EMAIL PROTECTED]/208.39.141.86/
xanadu.evi-inc.com: result: pass, comment: Please see htt\
p://spf.pobox.com/why.html?sender=mkettler%40evi-
inc.com&ip=208.39.141.86&receiver=closet.local: 208.39.141.80/28 conta\
ins 208.39.141.86
My listserver is NATed.
I do have trusted_networks declared.
On Aug 16, 2005, at 6:29 AM, Matt Kettler wrote:
Well, that one failed and it wasn't the list-posted copy. That was
my direct email.
And the HELO *should* pass due to the inclusion of IP address.
It looks like you've got a broken trust path and SA is checking the
wrong
Received: header.
Is your mailserver NATed?
Do you have trusted_networks declared?
Steve Martin wrote:
Well, it doesn't ;-)
On Aug 15, 2005, at 6:02 PM, Matt Kettler wrote:
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: by cheezmo.com (Postfix, from userid 88)
id 30552EBDC5; Mon, 15 Aug 2005 18:03:32 -0500 (CDT)
X-Spam-Flag: NO
X-Spam-Checker-Version: SpamAssassin 3.1.0-rc1 (2005-08-11) on
closet.local
X-Spam-Level:
X-Spam-Hammy: Tokens not available.
X-Spam-Status: No, score=-5.2 required=5.0
tests=AWL,FORGED_RCVD_HELO,
SPF_HELO_SOFTFAIL,USER_IN_WHITELIST_TO autolearn=no
version=3.1.0-rc1
X-Spam-Spammy: Tokens not available.
X-Spam-Tokens: Bayes not run.
X-Spam-Report:
* 0.1 FORGED_RCVD_HELO Received: contains a forged HELO
* -6.0 USER_IN_WHITELIST_TO User is listed in 'whitelist_to'
* 2.4 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record
(softfail)
* [SPF failed: ]
* -1.8 AWL AWL: From: address is in the auto white-list
Received: from xanadu.evi-inc.com (xan.evitechnology.com
[208.39.141.86])
by cheezmo.com (Postfix) with ESMTP id 816AAEBDBA
for <[EMAIL PROTECTED]>; Mon, 15 Aug 2005 18:02:57
-0500 (CDT)
Received: from [10.0.6.1] (EVI802-275.evitechnology.com [10.0.6.1])
(authenticated bits=0)
by xanadu.evi-inc.com (8.12.8/8.12.8) with ESMTP id
j7FN27bt005517;
Mon, 15 Aug 2005 19:02:07 -0400
--
Steve Martin http://www.cheezmo.com/
Smart Calibration, LLC http://www.smartcalibration.com/
The Widescreen Movie Center http://www.widemovies.com/
Letterboxed Movie TV Schedule http://www.widemovies.com/lbx.html
