libspf2: "ip6" mechanism not working ?

Benoit Branciard <[email protected]> Thu, 18 Feb 2010 20:15:35 +0100
Newsgroups gmane.mail.spam.spf.devel
Message-ID <[email protected]>
Hello,

If I publish a SPF record like this:

testspf.univ-paris1.fr descriptive text "v=3Dspf1 ip6:2001:660:3305::71
ip4:193.55.96.71 -all"

then execute some queries on it using libspf2 (through the spfquery
command):

spfquery -i 193.55.96.71 -s testspf.univ-paris1.fr
-> pass

spfquery -i 2001:660:3305::71 -s testspf.univ-paris1.fr
-> fail

I would have expected both queries to return "pass".

Tested lipspf2/spfquery versions are: 1.2.5 and 1.2.9, with same faulty
results.
Testing environment is on Debian Lenny, libspf2 are from Debian packages
   (Lenny and Sid).

I arrived to the conclusion of a libspf2 bug after seeing a
libspf2-linked mail filter (milter-greylist) not behave as expected on
incoming SPF-enabled IPv6 SMTP connexions. After thoroughly examining
the faulty SPF record, I concluded the SPF test should have passed,
whereas it failed. Then I did some manual queries using spfquery on the
same SPF record with same results. I then created the above simple test
SPF record which obviously illustrates the bug.

Could someone have a look at it ?


Best regards,

--=20
Benoit BRANCIARD
P=F4le Infrastructures
Centre de ressources informatiques et du r=E9seau (CRIR)
Universit=E9 Paris 1 Panth=E9on-Sorbonne
http://crir.univ-paris1.fr
Tel. 01 44 07 89 68


--=20
Ce message a ete verifie par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a ete trouve.