libspf2: "ip6" mechanism not working ?
Benoit Branciard <[email protected]> Thu, 18 Feb 2010 20:15:35 +0100
| Newsgroups | gmane.mail.spam.spf.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, If I publish a SPF record like this: testspf.univ-paris1.fr descriptive text "v=3Dspf1 ip6:2001:660:3305::71 ip4:193.55.96.71 -all" then execute some queries on it using libspf2 (through the spfquery command): spfquery -i 193.55.96.71 -s testspf.univ-paris1.fr -> pass spfquery -i 2001:660:3305::71 -s testspf.univ-paris1.fr -> fail I would have expected both queries to return "pass". Tested lipspf2/spfquery versions are: 1.2.5 and 1.2.9, with same faulty results. Testing environment is on Debian Lenny, libspf2 are from Debian packages (Lenny and Sid). I arrived to the conclusion of a libspf2 bug after seeing a libspf2-linked mail filter (milter-greylist) not behave as expected on incoming SPF-enabled IPv6 SMTP connexions. After thoroughly examining the faulty SPF record, I concluded the SPF test should have passed, whereas it failed. Then I did some manual queries using spfquery on the same SPF record with same results. I then created the above simple test SPF record which obviously illustrates the bug. Could someone have a look at it ? Best regards, --=20 Benoit BRANCIARD P=F4le Infrastructures Centre de ressources informatiques et du r=E9seau (CRIR) Universit=E9 Paris 1 Panth=E9on-Sorbonne http://crir.univ-paris1.fr Tel. 01 44 07 89 68 --=20 Ce message a ete verifie par MailScanner pour des virus ou des polluriels et rien de suspect n'a ete trouve.