From: Jamie Clark <jamie@me...> - 2004-11-30 07:29:51
I built and installed version 0.2.3 of sid-milter earlier today, running
in test mode.
After a few hundred messages passed through the filter I examined the logs.
Within the mix of many 'passes' and 'neutrals' were two fails: one for
and another for amazon.com.
Upon closer examination the mails, headers, relay host, and spf records all
appear legitimate. http://www.dnsstuff.com/pages/spf.htm seems to agree.
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [220.127.116.11])
by prodapp1.ofs.edu.sg (8.13.2.Alpha2+/8.13.0) with ESMTP id
for <not_important@...>; Tue, 30 Nov 2004 14:28:00 +0800
Authentication-Results: prodapp1.ofs.edu.sg; sender-id=fail
(NotPermitted); spf=fail (NotPermitted)
The From and Return-Path headers agree, and 18.104.22.168 is a valid
outbound relay for sap.com
jclark@...:~$ dig txt sap.com
sap.com. 82795 IN TXT "v=spf1 mx -all"
jclark@...:~$ dig mx sap.com
sap.com. 71412 IN MX 100 smtpde01.sap-ag.de.
sap.com. 71412 IN MX 100 smtpde02.sap-ag.de.
sap.com. 71412 IN MX 100 smtpde03.sap-ag.de.
smtpde01.sap-ag.de. 71416 IN A 22.214.171.124
smtpde02.sap-ag.de. 71416 IN A 126.96.36.199
smtpde03.sap-ag.de. 71412 IN A 188.8.131.52
Similar for the amazon email. Everything is kosher, but message gets
failed (but delivered
since I am running with -t)
Anything I can do to shed some light on this? I can't see any debug
options. I am running with -l and -t, but only thing logged to syslog
is the startup message.
Thanks for any help,