cgigande at hotmail
Oct 25, 2006, 2:13 PM
Views: 2928
Permalink
|
|
SPF - microsoft.com Maximum lookup or DNS unresolve
|
|
Hello,
I am currently using SPF (thanks to openspf) using the postfix-policyd-spf
perl script (v 1.06) and Query.pm (v1.44). I got some feedback from end
users not receiving email from microsoft.com.
On the spf-discuss mailinglist (archive of May) that there is an issue
discussed with the SPF format of microsoft.com which demand lots of dns
lookup.
I've done a test using the new version of Query.pm (1.999001) with "my
$MAX_LOOKUP_COUNT = 50", but I still get the following error:
--------------------------------------------------------------------------
[root[at]hostname]# ./postfix-policyd-spf
request=smtpd_access_policy
protocol_state=RCPT
protocol_name=SMTP
helo_name=mail4.mssupport.microsoft.com
sender=service[at]microsoft.com
recipient=destination[at]domain.com
client_address=131.107.70.12
client_name=mail4.mssupport.microsoft.com
action=DEFER_IF_PERMIT Please see
http://www.openspf.org/why.html?sender=service%40microsoft.com&ip=131.107.70.12&receiver=hostname:
DNS error while looking up smtp.msn.com A: SERVFAIL
older version give me this result as query.pm returns "error"
action=450 temporary failure: Please see
http://spf.pobox.com/why.html?sender=service%40microsoft.com&ip=131.107.70.12&receiver=hostname:
DNS error while looking up smtp.msn.com A: query timed out
--------------------------------------------------------------------------
Does anyone know if this error is really due to all lookups that are needed
for microsoft.com SPF or is it because smtp.msn.com is unresolvable?
(I've not yet had a look on the meaning of the new return codes)
For right now I ve kept the old version of query.pm and added the following
to postfix-policyd-spf as a workaround:
if ($attr{sender} =~ /\@microsoft.com/)
{ syslog(info=>"%s: SPF Skipping SPF check for
microsoft.com",$attr{queue_id});
return "DUNNO-Microsoft exception";
}
Does anyone else have other workaround?
Thank you in advance for your feedback
Chris
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81
|
SPF - microsoft.com Maximum lookup or DNS unresolve
