Mailing List Archive: SPF: Help

SPF - microsoft.com Maximum lookup or DNS unresolve

Index | Next | Previous | View Threaded

cgigande at hotmail

Oct 25, 2006, 2:13 PM

Post #1 of 2 (3670 views)
Permalink

SPF - microsoft.com Maximum lookup or DNS unresolve

Hello,

I am currently using SPF (thanks to openspf) using the postfix-policyd-spf
perl script (v 1.06) and Query.pm (v1.44). I got some feedback from end
users not receiving email from microsoft.com.

On the spf-discuss mailinglist (archive of May) that there is an issue
discussed with the SPF format of microsoft.com which demand lots of dns
lookup.

I've done a test using the new version of Query.pm (1.999001) with "my
$MAX_LOOKUP_COUNT = 50", but I still get the following error:

--------------------------------------------------------------------------
[root [at] hostnam]# ./postfix-policyd-spf
request=smtpd_access_policy
protocol_state=RCPT
protocol_name=SMTP
helo_name=mail4.mssupport.microsoft.com
sender=service [at] microsoft
recipient=destination [at] domain
client_address=131.107.70.12
client_name=mail4.mssupport.microsoft.com

action=DEFER_IF_PERMIT Please see
http://www.openspf.org/why.html?sender=service%40microsoft.com&ip=131.107.70.12&receiver=hostname:
DNS error while looking up smtp.msn.com A: SERVFAIL

older version give me this result as query.pm returns "error"
action=450 temporary failure: Please see
http://spf.pobox.com/why.html?sender=service%40microsoft.com&ip=131.107.70.12&receiver=hostname:
DNS error while looking up smtp.msn.com A: query timed out
--------------------------------------------------------------------------

Does anyone know if this error is really due to all lookups that are needed
for microsoft.com SPF or is it because smtp.msn.com is unresolvable?

(I've not yet had a look on the meaning of the new return codes)

For right now I ve kept the old version of query.pm and added the following
to postfix-policyd-spf as a workaround:

if ($attr{sender} =~ /\@microsoft.com/)
{ syslog(info=>"%s: SPF Skipping SPF check for
microsoft.com",$attr{queue_id});
return "DUNNO-Microsoft exception";
}

Does anyone else have other workaround?

Thank you in advance for your feedback
Chris

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

alex at ergens

Oct 25, 2006, 6:14 PM

Post #2 of 2 (3295 views)
Permalink

Re: SPF - microsoft.com Maximum lookup or DNS unresolve [In reply to]

On Wed, Oct 25, 2006 at 11:13:40PM +0200, chris gigs wrote:

> Does anyone know if this error is really due to all lookups that are needed
> for microsoft.com SPF or is it because smtp.msn.com is unresolvable?

It is because of:

$ dig smtp.msn.com
;; Truncated, retrying in TCP mode.

[...]

The daemon doesn't try tcp, or your firewall is blocking it.

HTH
Alex

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads