From: Sharma, A. <ash...@hp...> - 2011-05-11 12:02:52
|
Hi, I have a Postfix mail receiving server, on this I am using sid-milter (found at http://sourceforge.net/projects/sid-milter/ got from http://www.postfix.org/addon.html) tool to validate senderID and SPF. Here the problem is for mail servers that implement Sender-ID, mail servers that are implementing sender-ID and having their mails sent via Blackberry are having their sender-ID (sender-id=neutral) not getting verified on my postfix end. Following are the mail headers that I am receiving: >From SRS0=nRLNv7=UW=aol.com=xx...@sr... Mon Jan 24 11:05:10 2011 Return-Path: <SRS0=nRLNv7=UW=aol.com=xxx...@sr...> X-Original-To: cp...@de... Delivered-To: cp...@de... Received: from localhost (localhost [127.0.0.1]) by dev1.cpgtest.ostinet.net (Postfix) with ESMTP id C94AA2828C for <cp...@de...>; Mon, 24 Jan 2011 11:05:10 -0500 (EST) Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... X-DKIM: OpenDKIM Filter v2.1.3 dev1.cpgtest.ostinet.net D5DEA2815D Authentication-Results: dev1.cpgtest.ostinet.net; dkim=none (no signature); dkim-adsp=none Received: from b27.c7.bise7.blackberry ([192.168.0.127]) by srs.bis7.eu.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id p0OFtGaw021900 for cp...@de...; Mon, 24 Jan 2011 16:05:09 GMT X-rim-org-msg-ref-id: 300123690 Message-ID: <300...@b2...se7.blackberry> Content-Transfer-Encoding: base64 Reply-To: xxx...@ao... X-Priority: Normal References: <160...@b2...se7.blackberry> In-Reply-To: <160...@b2...se7.blackberry> Sensitivity: Normal Importance: Normal Subject: Re: Test from aol To: cp...@de... From: xxx...@ao... Date: Mon, 24 Jan 2011 16:05:51 +0000 Content-Type: text/plain; charset="Windows-1252" MIME-Version: 1.0 Status: RO Can anybody tell me what needs to be done at my end to get sender-ID for mails sent via Blackberry to be verified and passed correctly. Also as can be seen Blackberry implements SRS (Sender Rewrite Scheme): Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... so as per my understanding Sender-ID validation should in this case work flawless as Sender Rewrite Scheme(SRS) makes sure SPF passes if a mail forwarder has implemented SRS as per information available at the links http://www.openspf.org/SRS and http://www.libsrs2.org/srs/srs.pdf If the above information is correct, then why sid-milter is behaving as experienced, is it a bug? Thanks Ashish Sharma |
From: Varghese, D. <dan...@hp...> - 2011-05-24 14:12:55
|
Hi Peter, Thanks for your reply. I'm replying this mail quite late since I'm new to this domain and trying to understand the Basics. If the same mail has comes via yahoo/hotmail SPF gives us "none" and "softfail" is that right? Regards, Daniel -----Original Message----- From: Dick St. Peters [mailto:st.peters@NetHeaven.com] Sent: Friday, May 13, 2011 5:21 AM To: Varghese, Daniel Cc: st.peters@NetHeaven.com Subject: Re: [sid-milter-discuss] Sender-ID validation via Blackberry failing Hi, Sender-ID uses the PRA, which in most cases is the header.from address. In particular, it is not the envelope from address, except when they happen to be the same address. While they are commonly the same address, for your example mail they are not the same. The header.from domain in that mail is aol.com, and the aol.com SPF record ends with ~all - which is neutral, meaning the sid-milter Sender-ID result is correct. -- Dick St. Peters, st.peters@NetHeaven.com Gatekeeper, NetHeaven, Saratoga Springs, NY Sharma, Ashish writes: > Hi, > > I have a Postfix mail receiving server, on this I am using sid-milter (found at http://sourceforge.net/projects/sid-milter/ got from http://www.postfix.org/addon.html) tool to validate senderID and SPF. > > Here the problem is for mail servers that implement Sender-ID, mail servers that are implementing sender-ID and having their mails sent via Blackberry are having their sender-ID (sender-id=neutral) not getting verified on my postfix end. > > Following are the mail headers that I am receiving: > > >From SRS0=nRLNv7=UW=aol.com=xx...@sr... Mon Jan 24 11:05:10 2011 > Return-Path: <SRS0=nRLNv7=UW=aol.com=xxx...@sr...> > X-Original-To: cp...@de... > Delivered-To: cp...@de... > Received: from localhost (localhost [127.0.0.1]) > by dev1.cpgtest.ostinet.net (Postfix) with ESMTP id C94AA2828C > for <cp...@de...>; Mon, 24 Jan 2011 11:05:10 -0500 (EST) > Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... > X-DKIM: OpenDKIM Filter v2.1.3 dev1.cpgtest.ostinet.net D5DEA2815D > Authentication-Results: dev1.cpgtest.ostinet.net; dkim=none (no signature); > dkim-adsp=none > Received: from b27.c7.bise7.blackberry ([192.168.0.127]) > by srs.bis7.eu.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id p0OFtGaw021900 > for cp...@de...; Mon, 24 Jan 2011 16:05:09 GMT > X-rim-org-msg-ref-id: 300123690 > Message-ID: <300...@b2...se7.blackberry> > Content-Transfer-Encoding: base64 > Reply-To: xxx...@ao... > X-Priority: Normal > References: <160...@b2...se7.blackberry> > In-Reply-To: <160...@b2...se7.blackberry> > Sensitivity: Normal > Importance: Normal > Subject: Re: Test from aol > To: cp...@de... > From: xxx...@ao... > Date: Mon, 24 Jan 2011 16:05:51 +0000 > Content-Type: text/plain; charset="Windows-1252" > MIME-Version: 1.0 > Status: RO > > > Can anybody tell me what needs to be done at my end to get sender-ID for mails sent via Blackberry to be verified and passed correctly. > > Also as can be seen Blackberry implements SRS (Sender Rewrite Scheme): > > Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... > > so as per my understanding Sender-ID validation should in this case work flawless as Sender Rewrite Scheme(SRS) makes sure SPF passes if a mail forwarder has implemented SRS as per information available at the links http://www.openspf.org/SRS and http://www.libsrs2.org/srs/srs.pdf > > If the above information is correct, then why sid-milter is behaving as experienced, is it a bug? > > Thanks > Ashish Sharma > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > sid-milter-discuss mailing list > sid...@li... > https://lists.sourceforge.net/lists/listinfo/sid-milter-discuss |
From: Varghese, D. <dan...@hp...> - 2011-05-24 14:26:23
|
Sorry for the confusion, I mean SID . Let me re-write the whole story again. The first example that we had picked BlackBerry(BB) configure to Send mail using AOL account. Similarly BB configured to send yahoo/hotmail SID gives us "none" and "softfail" is that right? Regards, Daniel -----Original Message----- From: Varghese, Daniel Sent: Tuesday, May 24, 2011 7:42 PM To: sid...@li... Subject: Re: [sid-milter-discuss] Sender-ID validation via Blackberry failing Hi Peter, Thanks for your reply. I'm replying this mail quite late since I'm new to this domain and trying to understand the Basics. If the same mail has comes via yahoo/hotmail SPF gives us "none" and "softfail" is that right? Regards, Daniel -----Original Message----- From: Dick St. Peters [mailto:st.peters@NetHeaven.com] Sent: Friday, May 13, 2011 5:21 AM To: Varghese, Daniel Cc: st.peters@NetHeaven.com Subject: Re: [sid-milter-discuss] Sender-ID validation via Blackberry failing Hi, Sender-ID uses the PRA, which in most cases is the header.from address. In particular, it is not the envelope from address, except when they happen to be the same address. While they are commonly the same address, for your example mail they are not the same. The header.from domain in that mail is aol.com, and the aol.com SPF record ends with ~all - which is neutral, meaning the sid-milter Sender-ID result is correct. -- Dick St. Peters, st.peters@NetHeaven.com Gatekeeper, NetHeaven, Saratoga Springs, NY Sharma, Ashish writes: > Hi, > > I have a Postfix mail receiving server, on this I am using sid-milter (found at http://sourceforge.net/projects/sid-milter/ got from http://www.postfix.org/addon.html) tool to validate senderID and SPF. > > Here the problem is for mail servers that implement Sender-ID, mail servers that are implementing sender-ID and having their mails sent via Blackberry are having their sender-ID (sender-id=neutral) not getting verified on my postfix end. > > Following are the mail headers that I am receiving: > > >From SRS0=nRLNv7=UW=aol.com=xx...@sr... Mon Jan 24 11:05:10 2011 > Return-Path: <SRS0=nRLNv7=UW=aol.com=xxx...@sr...> > X-Original-To: cp...@de... > Delivered-To: cp...@de... > Received: from localhost (localhost [127.0.0.1]) > by dev1.cpgtest.ostinet.net (Postfix) with ESMTP id C94AA2828C > for <cp...@de...>; Mon, 24 Jan 2011 11:05:10 -0500 (EST) > Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... > X-DKIM: OpenDKIM Filter v2.1.3 dev1.cpgtest.ostinet.net D5DEA2815D > Authentication-Results: dev1.cpgtest.ostinet.net; dkim=none (no signature); > dkim-adsp=none > Received: from b27.c7.bise7.blackberry ([192.168.0.127]) > by srs.bis7.eu.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id p0OFtGaw021900 > for cp...@de...; Mon, 24 Jan 2011 16:05:09 GMT > X-rim-org-msg-ref-id: 300123690 > Message-ID: <300...@b2...se7.blackberry> > Content-Transfer-Encoding: base64 > Reply-To: xxx...@ao... > X-Priority: Normal > References: <160...@b2...se7.blackberry> > In-Reply-To: <160...@b2...se7.blackberry> > Sensitivity: Normal > Importance: Normal > Subject: Re: Test from aol > To: cp...@de... > From: xxx...@ao... > Date: Mon, 24 Jan 2011 16:05:51 +0000 > Content-Type: text/plain; charset="Windows-1252" > MIME-Version: 1.0 > Status: RO > > > Can anybody tell me what needs to be done at my end to get sender-ID for mails sent via Blackberry to be verified and passed correctly. > > Also as can be seen Blackberry implements SRS (Sender Rewrite Scheme): > > Authentication-Results: dev1.cpgtest.ostinet.net; sender-id=neutral header.from=xxx...@ao...; spf=pass smtp.mfrom=SRS0=nRLNv7=UW=aol.com=xxx...@sr... > > so as per my understanding Sender-ID validation should in this case work flawless as Sender Rewrite Scheme(SRS) makes sure SPF passes if a mail forwarder has implemented SRS as per information available at the links http://www.openspf.org/SRS and http://www.libsrs2.org/srs/srs.pdf > > If the above information is correct, then why sid-milter is behaving as experienced, is it a bug? > > Thanks > Ashish Sharma > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > sid-milter-discuss mailing list > sid...@li... > https://lists.sourceforge.net/lists/listinfo/sid-milter-discuss ------------------------------------------------------------------------------ vRanger cuts backup time in half-while increasing security. With the market-leading solution for virtual backup and recovery, you get blazing-fast, flexible, and affordable data protection. Download your free trial now. http://p.sf.net/sfu/quest-d2dcopy1 _______________________________________________ sid-milter-discuss mailing list sid...@li... https://lists.sourceforge.net/lists/listinfo/sid-milter-discuss |