#14 False rejection
sid-filter gives me a "rejected" even though the mail should have
been passed.
The SPF-Record (mckinsey.com):
v=spf1 ip4:157.191.3.0/24 include:spf.postini.com -all
The Include (spf.postini.com):
v=spf1 ip4:131.161.233.0/24 ip4:12.158.34.0/23 ip4:12.158.40.0/24
ip4:64.18.0.0/20 ip4:207.126.144.0/20 ip4:63.146.199.13/32
ip4:63.146.199.14/32 -all
The Mail with From-Domain mckinsey.com came from 64.18.1.122,
wich is within the network 64.18.0.0/20 listed above. The message
is rejected anyway:
Jul 4 18:14:49 ### sendmail[31081]: NOQUEUE: connect from
exprod6og2.obsmtp.com [64.18.1.122]
Jul 4 18:14:52 ### sendmail[31081]: AUTH: available
mech=DIGEST-MD5 CRAM-MD5, allowed mech=LOGIN PLAIN
Jul 4 18:14:52 ### sendmail[31081]: j64GEnue031081: Milter (sid-
filter): init success to negotiate
Jul 4 18:14:52 ### sendmail[31081]: j64GEnue031081: Milter:
connect to filters
Jul 4 18:14:52 ### sendmail[31081]: j64GEnue031081: milter=sid-
filter, action=connect, continue
Jul 4 18:14:53 ### sendmail[31081]: j64GEnue031081: milter=sid-
filter, action=mail, continue
Jul 4 18:14:55 ### last message repeated 10 times
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081:
from=<###@mckinsey.com>, size=110763, class=0, nrcpts=1,
msgid=<###>, proto=SMTP, daemon=MTA,
relay=exprod6og2.obsmtp.com [64.18.1.122]
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: milter=sid-
filter, action=header, continue
Jul 4 18:14:56 ### last message repeated 10 times
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: milter=sid-
filter, action=eoh, continue
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: Milter insert
(1): header: Authentication-Results: ###.###.net
from=###@mckinsey.com; sender-id=fail (NotPermitted); spf=fail
(NotPermitted)
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: milter=sid-
filter, reject
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: Milter: reject,
data
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081: Milter: data,
reject=554 5.7.1 Command rejected
Jul 4 18:14:56 ### sendmail[31081]: j64GEnue031081:
to=<###@###.org>, delay=00:00:03, pri=140763, stat=Command
rejected
The Pobox-"Why"-Script says, the mail should have been passed,
which is right:
http://spf.pobox.com/why.html?sender=x%
40mckinsey.com&ip=64.18.1.122&formwasused=1&debug=0
Logged In: YES
user_id=1048957
Fixed in 0.2.9.
Logged In: YES
user_id=1048957
v0.2.9 released.