san.ranbir at gmail
Oct 23, 2009, 3:44 AM
Post #13 of 13
(126 views)
Permalink
|
Thank you Alan,
As of now, it is working as intended.
regards
-ranbir
On Thu, Oct 22, 2009 at 12:16 PM, alan <spfdiscuss[at]alandoherty.net> wrote:
> wow messy
> but think the below changes to first section should work
>
> ie no deny happens
>
> and then later condition 1 is another valid header adding condition
>
> but this could be done way cleaner and i can't figure out the second header
> adding code that runs the same code if response is >6 {which should cause an
> error}
> {also if you don't want to reject on fail you might also not want to defer
> on dns issues?}
>
> will get sleep and possibly have a 2 section version for you tomorrow
> 7:45 and still awake from yesterday
>
> At 07:01 22/10/2009 Thursday, Ranbir Sanasam wrote:
> >Thanks Allan,
> >Following is the rcpt record.
> >
> > .ifdef CHECK_RCPT_SPF
> > warn
> > message = [SPF] $sender_host_address is not allowed to send mail from
> >${if def:sender_address_domain
> >{$sender_address_domain}{$sender_helo_name}}. \
> > Please see
> >http://www.openspf.org/Why?scope=${ifdef:sender_address_domain<http://www.openspf.org/Why?scope=$%7Bifdef:sender_address_domain>
> >{mfrom}{helo}};identity=${if
> >def:sender_address_domain
> >{$sender_address}{$sender_helo_name}};ip=$sender_host_address
> > log_message = SPF check failed.
> > !acl = acl_local_deny_exceptions
> > condition = ${run{/usr/bin/spfquery --ip \"$sender_host_address\"
> >--mail-from \"$sender_address\" --helo \"$sender_helo_name\"}\
> > {no}{${if eq {$runrc}{1}{yes}{no}}}}
> >
> > defer
> > message = Temporary DNS error while checking SPF record. Try again
> >later.
> > condition = ${if eq {$runrc}{5}{yes}{no}}
> >
> > warn
> > message = Received-SPF: ${if eq {$runrc}{0}{pass}{${if eq
> >{$runrc}{1}{hardfail}{${if eq{$runrc}{2}{softfail}\
> > {${if eq {$runrc}{3}{neutral}{${if eq
> >{$runrc}{4}{unknown}{${if eq {$runrc}{6}{none}{error}}}}}}}}}}}}
> > condition = ${if <={$runrc}{6}{yes}{no}}
> >
> > warn
> > message = Received-SPF: ${if eq {$runrc}{0}{pass}{${if eq
> >{$runrc}{2}{softfail}\
> > {${if eq {$runrc}{3}{neutral}{${if eq
> >{$runrc}{4}{unknown}{${if eq {$runrc}{6}{none}{error}}}}}}}}}}
> > log_message = Unexpected error in SPF check.
> > condition = ${if >{$runrc}{6}{yes}{no}}
> >
> > # Support for best-guess (see
> http://www.openspf.org/developers-guide.html
> >)
> > warn
> > message = X-SPF-Guess: ${run{/usr/bin/spfquery --ip
> >\"$sender_host_address\" --mail-from \"$sender_address\" \ --helo
> >\"$sender_helo_name\" --guess true}\
> > {pass}{${if eq {$runrc}{2}{softfail}{${if
> eq
> >{$runrc}{3}{neutral}{${if eq {$runrc}{4}{unknown}\
> > {${if eq {$runrc}{6}{none}{error}}}}}}}}}}
> > condition = ${if <={$runrc}{6}{yes}{no}}
> >
> > defer
> > message = Temporary DNS error while checking SPF record. Try again
> >later.
> > condition = ${if eq {$runrc}{5}{yes}{no}}
> > .endif
> >
> >
> >On Wed, Oct 21, 2009 at 11:20 PM, alan <spfdiscuss[at]alandoherty.net>
> wrote:
> >
> >> At 18:11 21/10/2009 Wednesday, Scott Kitterman wrote:
> >> >On Wed, 21 Oct 2009 17:12:24 +0100 alan <spfdiscuss[at]alandoherty.net>
> >> wrote:
> >> >>none of these are related to this group
> >> >>{this group is for people seeking help with their "SPF record" setup,
> not
> >> >for receivers trying to configure their mailservers}
> >> >>
> >> >
> >> >I very much disagree. It is on topic. That said, unless someone here
> is
> >> >using Exim, an Exim specific venue might be better (I'm glad to help
> with
> >> >Postfix questions).
> >>
> >> if it is I take it all back
> >> send me a copy of the rcpt code of your exim.conf and I'll point out the
> >> line
> >>
> >> my bad sorry
> >>
> >>
> >>
> >> -------------------------------------------
> >> Sender Policy Framework: http://www.openspf.org [http://www.openspf.org
> ]
> >> Modify Your Subscription: http://www.listbox.com/member/ [
> >> http://www.listbox.com/member/]
> >>
> >> Archives: https://www.listbox.com/member/archive/1020/=now
> >> RSS Feed: https://www.listbox.com/member/archive/rss/1020/
> >> Powered by Listbox: http://www.listbox.com
> >>
> >
> >
> >-------------------------------------------
> >Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
> >Modify Your Subscription: http://www.listbox.com/member/ [
> http://www.listbox.com/member/]
> >
> >Archives: https://www.listbox.com/member/archive/1020/=now
> >RSS Feed: https://www.listbox.com/member/archive/rss/1020/
> >Powered by Listbox: http://www.listbox.com
>
>
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
> Modify Your Subscription: http://www.listbox.com/member/ [
> http://www.listbox.com/member/]
>
> Archives: https://www.listbox.com/member/archive/1020/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/1020/
> Powered by Listbox: http://www.listbox.com
>
-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
|
