Problem getting python-policyd-spf to reject on Permerror
"David Jones via spf-devel" <[email protected]> Thu, 14 Dec 2017 16:45:14 +0000
| Newsgroups | gmane.mail.spam.spf.devel |
|---|---|
| Message-ID | <SN4PR0201MB350360006D5B8089870F354DC60A0@SN4PR0201MB3503.namprd02.prod.outlook.com> |
--_000_SN4PR0201MB350360006D5B8089870F354DC60A0SN4PR0201MB3503_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I would like to up my SPF game a bit and provide feedback to those who don'= t have a misconfigured SPF record. I have enabled debugging and only see a= n action of prepending the AR header. postfix-3.0.5-1.el6.x86_64 python-pyspf-2.0.11-1.el6.noarch /etc/python-policyd-spf/policyd-spf.conf debugLevel =3D 5 defaultSeedOnly =3D 1 HELO_reject =3D False Mail_From_reject =3D Fail No_Mail =3D False PermError_reject =3D True TempError_Defer =3D False skip_addresses =3D 127.0.0.0/8,::ffff:127.0.0.0/104,::1 Whitelist =3D 96.4.1.0/26,96.5.1.0/26 Header_Type =3D AR Dec 14 10:21:30 mr3 policyd-spf[33206]: Starting Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "request=3Dsmtpd_access_= policy" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "protocol_state=3DRCPT" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "protocol_name=3DSMTP" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "client_address=3D129.17= 6.115.3" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "client_name=3Dropebs021= a.mayo.edu" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "client_port=3D32657" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "reverse_client_name=3Dr= opebs021a.mayo.edu" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "helo_name=3Dlistmanager= .mayoclinic.com" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sender=3Dbounce-1665130= [email protected]" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "recipient=3DJbrandon@ex= ample.com" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "recipient_count=3D0" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "queue_id=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "instance=3D8139.5a32a50= a.b16c8.0" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "size=3D0" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "etrn_domain=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "stress=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sasl_method=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sasl_username=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sasl_sender=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert_subject=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert_issuer=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert_fingerprint=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert_pubkey_fingerprin= t=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "encryption_protocol=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "encryption_cipher=3D" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "encryption_keysize=3D0" Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "" Dec 14 10:21:30 mr3 policyd-spf[33206]: Found the end of entry Dec 14 10:21:30 mr3 policyd-spf[33206]: Config: {'Mail_From_reject': 'Fail'= , 'Void_Limit': 2, 'Header_Type': 'AR', 'No_Mail': 'False', 'PermError_reje= ct': 'True', 'Lookup_Time': 20, 'Authserv_Id': 'smtp4n.ena.net', 'defaultSe= edOnly': 1, 'debugLevel': 5, 'skip_addresses': '127.0.0.0/8,::ffff:127.0.0.= 0/104,::1', 'HELO_reject': 'False', 'Whitelist': '96.4.1.0/26,96.5.1.0/26',= 'TempError_Defer': 'False'} Dec 14 10:21:30 mr3 policyd-spf[33206]: Cached data for this instance: [] Dec 14 10:21:30 mr3 policyd-spf[33206]: spfcheck: pyspf result: "['Permerro= r', 'SPF Permanent Error: Unknown mechanism found: -all;', 'helo']" Dec 14 10:21:30 mr3 policyd-spf[33206]: Permerror; identity=3Dhelo; client-= ip=3D129.176.115.3; helo=3Dlistmanager.mayoclinic.com; envelope-from=3Dboun= [email protected]; receiver=3Djbrandon@examp= le.com Dec 14 10:21:30 mr3 policyd-spf[33206]: Header type: AR; Authres ID (for AR= ): smtp4n.ena.net Dec 14 10:21:30 mr3 policyd-spf[33206]: spfcheck: pyspf result: "['Permerro= r', 'SPF Permanent Error: Unknown mechanism found: -all;', 'mailfrom']" Dec 14 10:21:30 mr3 policyd-spf[33206]: Permerror; identity=3Dmailfrom; cli= ent-ip=3D129.176.115.3; helo=3Dlistmanager.mayoclinic.com; envelope-from=3D= [email protected]; receiver=3Djbrandon@e= xample.com Dec 14 10:21:30 mr3 policyd-spf[33206]: Action: prepend: Text: Authenticati= on-Results: smtp4n.ena.net; spf=3Dpermerror (SPF Permanent Error: Unknown m= echanism found: -all;) smtp.mailfrom=3Dlistmanager.mayoclinic.com (client-i= p=3D129.176.115.3; helo=3Dlistmanager.mayoclinic.com; envelope-from=3Dbounc= [email protected]; receiver=3Djbrandon@exampl= e.com) How do I get the action above to reject instead of adding a header? Thanks, Dave ------------------------------------------- Sender Policy Framework: http://www.openspf.net [http://www.openspf.net] Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbo= x.com/member/] Archives: https://www.listbox.com/member/archive/1007/=3Dnow RSS Feed: https://www.listbox.com/member/archive/rss/1007/6959932-f3d1312d Modify Your Subscription: https://www.listbox.com/member/?member_id=3D69599= 32&id_secret=3D6959932-d95100fc Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=3D6959932&i= d_secret=3D6959932-4aedb9c4&post_id=3D20171214114528:2EE7C12E-E0EE-11E7-BD3= 3-B265945AA1FE Powered by Listbox: http://www.listbox.com --_000_SN4PR0201MB350360006D5B8089870F354DC60A0SN4PR0201MB3503_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html><html><html><head><meta content=3D"text/html; charset=3Diso-8859-1" h= ttp-equiv=3D"Content-Type" /><style style=3D"display:none;" type=3D"text/cs= s"><!-- P {margin-top:0;margin-bottom:0;} --></style></head><body dir=3D"lt= r"><div dir=3D"ltr" id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;col= or:#000000;font-family:Calibri,Helvetica,sans-serif;"><p style=3D"margin-to= p:0;margin-bottom:0"><div>I would like to up my SPF game a bit and provide = feedback to those who don't have a misconfigured SPF record. I ha= ve enabled debugging and only see an action of prepending the AR header.</d= iv><div><br /></div><div><span>postfix-3.0.5-1.el6.x86_64</span><br /></div= ><div><span>python-pyspf-2.0.11-1.el6.noarch</span><br /></div><div><br /><= /div><div><span>/etc/python-policyd-spf/policyd-spf.conf</span><br /></div>= <div>debugLevel =3D 5</div><div>defaultSeedOnly =3D 1</div><div>HELO_reject= =3D False</div><div>Mail_From_reject =3D Fail</div><div>No_Mail =3D False<= /div><div>PermError_reject =3D True</div><div>TempError_Defer =3D False</di= v><div>skip_addresses =3D 127.0.0.0/8,::ffff:127.0.0.0/104,::1</div><div>Wh= itelist =3D 96.4.1.0/26,96.5.1.0/26</div><div>Header_Type =3D AR</div><div>= <br /></div><p><p style=3D"margin-top:0;margin-bottom:0"><span style=3D"fon= t-size: 12pt;">Dec 14 10:21:30 mr3 policyd-spf[33206]: Starting</span><br /= ><p style=3D"margin-top:0;margin-bottom:0"><div>Dec 14 10:21:30 mr3 policyd= -spf[33206]: Read line: "request=3Dsmtpd_access_policy"</div><div= >Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "protocol_state=3D= RCPT"</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: &qu= ot;protocol_name=3DSMTP"</div><div>Dec 14 10:21:30 mr3 policyd-spf[332= 06]: Read line: "client_address=3D129.176.115.3"</div><div>Dec 14= 10:21:30 mr3 policyd-spf[33206]: Read line: "client_name=3Dropebs021a= .mayo.edu"</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line= : "client_port=3D32657"</div><div>Dec 14 10:21:30 mr3 policyd-spf= [33206]: Read line: "reverse_client_name=3Dropebs021a.mayo.edu"</= div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "helo_name= =3Dlistmanager.mayoclinic.com"</div><div>Dec 14 10:21:30 mr3 policyd-s= pf[33206]: Read line: "sender=3Dbounce-16651308-108450563@listmanager.= mayoclinic.com"</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read= line: "[email protected]"</div><div>Dec 14 10:21:= 30 mr3 policyd-spf[33206]: Read line: "recipient_count=3D0"</div>= <div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "queue_id=3D&q= uot;</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ins= tance=3D8139.5a32a50a.b16c8.0"</div><div>Dec 14 10:21:30 mr3 policyd-s= pf[33206]: Read line: "size=3D0"</div><div>Dec 14 10:21:30 mr3 po= licyd-spf[33206]: Read line: "etrn_domain=3D"</div><div>Dec 14 10= :21:30 mr3 policyd-spf[33206]: Read line: "stress=3D"</div><div>D= ec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sasl_method=3D"= ;</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "sasl_u= sername=3D"</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read lin= e: "sasl_sender=3D"</div><div>Dec 14 10:21:30 mr3 policyd-spf[332= 06]: Read line: "ccert_subject=3D"</div><div>Dec 14 10:21:30 mr3 = policyd-spf[33206]: Read line: "ccert_issuer=3D"</div><div>Dec 14= 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert_fingerprint=3D&quo= t;</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "ccert= _pubkey_fingerprint=3D"</div><div>Dec 14 10:21:30 mr3 policyd-spf[3320= 6]: Read line: "encryption_protocol=3D"</div><div>Dec 14 10:21:30= mr3 policyd-spf[33206]: Read line: "encryption_cipher=3D"</div><= div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line: "encryption_key= size=3D0"</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Read line:= ""</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Found the e= nd of entry</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Config: {'= ;Mail_From_reject': 'Fail', 'Void_Limit': 2, 'Heade= r_Type': 'AR', 'No_Mail': 'False', 'PermErr= or_reject': 'True', 'Lookup_Time': 20, 'Authserv_Id= ': 'smtp4n.ena.net', 'defaultSeedOnly': 1, 'debugLe= vel': 5, 'skip_addresses': '127.0.0.0/8,::ffff:127.0.0.0/104,::1', = 'HELO_reject': 'False', 'Whitelist': '96.4.1.0/= 26,96.5.1.0/26', 'TempError_Defer': 'False'}</div><div>= Dec 14 10:21:30 mr3 policyd-spf[33206]: Cached data for this instance: []</= div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: spfcheck: pyspf result: &q= uot;['Permerror', 'SPF Permanent Error: Unknown mechanism found= : -all;', 'helo']"</div><div>Dec 14 10:21:30 mr3 policyd-s= pf[33206]: Permerror; identity=3Dhelo; client-ip=3D129.176.115.3; helo=3Dli= stmanager.mayoclinic.com; envelope-from=3Dbounce-16651308-108450563@listman= ager.mayoclinic.com; [email protected] </div><div>Dec 14= 10:21:30 mr3 policyd-spf[33206]: Header type: AR; Authres ID (for AR): smt= p4n.ena.net</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: spfcheck: pys= pf result: "['Permerror', 'SPF Permanent Error: Unknown me= chanism found: -all;', 'mailfrom']"</div><div>Dec 14 10:21= :30 mr3 policyd-spf[33206]: Permerror; identity=3Dmailfrom; client-ip=3D129= .176.115.3; helo=3Dlistmanager.mayoclinic.com; envelope-from=3Dbounce-16651= [email protected]; [email protected]&n= bsp;</div><div>Dec 14 10:21:30 mr3 policyd-spf[33206]: Action: prepend: Tex= t: Authentication-Results: smtp4n.ena.net; spf=3Dpermerror (SPF Permanent E= rror: Unknown mechanism found: -all;) smtp.mailfrom=3Dlistmanager.mayoclini= c.com (client-ip=3D129.176.115.3; helo=3Dlistmanager.mayoclinic.com; envelope-from=3Dbounce-16651308-108450563@listmanager.mayoclinic.com; rece= [email protected])</div><br /><p><p style=3D"margin-top:0;margin-= bottom:0">How do I get the action above to reject instead of adding a heade= r?<p style=3D"margin-top:0;margin-bottom:0">Thanks,<p style=3D"margin-top:0= ;margin-bottom:0">Dave<p style=3D"margin-top:0;margin-bottom:0"><br /></div= ><div bgcolor=3D"#ffffff" id=3D"listbox-footer" style=3D"width:auto;margin:= 0;padding:5px;background-color:#fff;clear:both;border-top: 1px solid #ccc;"= ><p style=3D"font-family:Arial,sans-serif;margin:0.5em auto">Sender Policy = Framework: <a href=3D"http://www.openspf.net">http://www.openspf.net</a><br= />=0D Modify Your Subscription: <a href=3D"http://www.listbox.com/member/">http:/= /www.listbox.com/member/</a><table bgcolor=3D"#ffffff" border=3D"0" cellpad= ding=3D"0" cellspacing=3D"0" style=3D"background-color:#fff" width=3D"100%"= ><tr><td padding=3D"4px"><font color=3D"#333333" size=3D"1" style=3D"font-f= amily:helvetica, sans-serif;"> <a href=3D"https://www.listbox.com/member/archive/1007/=3Dnow" style= =3D"text-decoration:none;color:#669933;border-bottom: 1px solid #444444" ti= tle=3D"Go to archives for spf-devel">Archives</a> <a border=3D"0" href=3D"https://www.listbox.com/member/archive/rss/1007/695= 9932-f3d1312d" style=3D"text-decoration:none;color:#669933" title=3D"RSS fe= ed for spf-devel"><img border=3D"0" src=3D"http://postlink.www.listbox.com/= 2444230/833487e62783d55fe81f119fb93ef644/6959932/c96a5796.jpg?uri=3DaHR0cHM= 6Ly93d3cubGlzdGJveC5jb20vaW1hZ2VzL2ZlZWQtaWNvbi0xMHgxMC5qcGc" /></a> | <a href=3D"https://www.listbox.com/member/?member_id=3D6959932&id_secret= =3D6959932-d95100fc" style=3D"text-decoration:none;color:#669933;border-bot= tom: 1px solid #444444" title=3D"">Modify</a> Your Subscription | <a href=3D"https://www.listbox.com/unsubscribe/?member= _id=3D6959932&id_secret=3D6959932-4aedb9c4&post_id=3D20171214114528:2EE7C12= E-E0EE-11E7-BD33-B265945AA1FE" style=3D"text-decoration:none;color:#669933;= border-bottom: 1px solid #444444" title=3D"">Unsubscribe Now</a><td align= =3D"right" valign=3D"top"><a href=3D"http://www.listbox.com" style=3D"borde= r-bottom:none;"> <img border=3D"0" src=3D"http://postlink.www.listbox.com/2444231/3379085af0= f1cf7fc3708f04b4471ae2/6959932/c96a5796.png?uri=3DaHR0cHM6Ly93d3cubGlzdGJve= C5jb20vaW1hZ2VzL2xpc3Rib3gtbG9nby1zbWFsbC5wbmc" title=3D"Powered by Listbox= " /></a></td></font></td></tr></table></div></body></html></html></html>= --_000_SN4PR0201MB350360006D5B8089870F354DC60A0SN4PR0201MB3503_--