Problem with SPF when more than 1 "to" recipients (was: Problem with SPF with cc ?)

[email protected] Mon, 6 Sep 2004 15:24:43 +0200
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <OF82E6B2C1.E7490E73-ONC1256F07.00497C73-C1256F07.0049ACAC@ebewe.com>
sorry! mistake

not cc but three recipients in to:

From: Bogdan Florea <[email protected]>
To:  [email protected],  [email protected],
[email protected]

and all others then [email protected] are treated as Spoof?

Wolfgang


Wolfgang Fuertbauer/EBEWE/AT schrieb am 06.09.2004 15:18:13:

> Hi,
> 
> I experience problems with spf; 
> when receiving mails with cc SPF seams to go wrong; see:
> 
> Sep  6 16:06:26 balalaika exim: 2004-09-06 16:06:26 1C4JCG-0004X3-U7
> <= [email protected] 
> Sep  6 16:07:47 balalaika exim: 2004-09-06 16:07:47 1C4JCG-0004X3-U7
> => [email protected] R=dnslookup T=remote_smtp H=mail.ebeweat 
> [80.120.1.196]
> Sep  6 16:07:47 balalaika exim: 2004-09-06 16:07:47 1C4JCG-0004X3-U7
> ** [email protected] R=dnslookup T=remote_smtp: SMTP error 
> from remote mailer after RCPT TO:<[email protected]>: host 
> mail.ebewe.at [80.120.1.196]: 550 X-SPF-3: SPOOF!
> Sep  6 16:07:47 balalaika exim: 2004-09-06 16:07:47 1C4JCG-0004X3-U7
> ** [email protected] R=dnslookup T=remote_smtp: SMTP 
> error from remote mailer after RCPT TO:<wolfgang.fuertbauer@ebewe.
> com>: host mail.ebewe.at [80.120.1.196]: 550 X-SPF-3: SPOOF!
> Sep  6 16:07:47 balalaika exim: 2004-09-06 16:07:47 1C4JDn-0004XX-9j
> <= <> R=1C4JCG-0004X3-U7 U=exim P=local S=108531
> Sep  6 16:07:47 balalaika exim: 2004-09-06 16:07:47 
1C4JCG-0004X3-U7Completed
> 
> why is the "to" recipient OK and the CC's not ? 
> all are in the same domain ?
> 
> exim.conf from mail.ebewe.at:
> 
> acl_smtp_rcpt = acl_check_rcpt
> ...
> acl_check_rcpt:
> ...
> deny message = X-SPF-3: SPOOF!
>           sender_domains = +local_domains
>           hosts   = ! 172.16.0.0/16
>           spf     = !pass
> 
> Exim version 4.42 #1 built 27-Aug-2004 12:59:32
> Copyright (c) University of Cambridge 2004
> Berkeley DB: Sleepycat Software: Berkeley DB 4.0.14: (March 13, 2003)
> Support for: iconv() IPv6 OpenSSL
> Lookups: lsearch wildlsearch nwildlsearch iplsearch dbm dbmnz dsearch
> Authenticators: cram_md5 plaintext
> Routers: accept dnslookup ipliteral manualroute queryprogram redirect
> Transports: appendfile/maildir autoreply lmtp pipe smtp
> Contains exiscan-acl patch revision 27 (c) Tom Kistner [http:
> //duncanthrax.net/exiscan/]
> Configuration file is /etc/exim/exim.conf

----------------------------------------------------------------------
Wolfgang Fuertbauer (E-Mail: [email protected])
EBEWE Pharma                          Tel: ++43 7665 8123 315
Mondseestrasse 11                     Fax: ++43 7665 8123 11
4866  Unterach, Austria
http://www.ebewe.com