<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Since this is concerning pypolicyd-spf and python-pyspf, unless
somehow MailScanner is at play here, I don't think this is a
MailScanner issue. Can you bypass MailScanner and test again?</p>
<div class="moz-cite-prefix">On 2/5/22 11:13, Pramod Daya via
MailScanner wrote:<br>
</div>
<blockquote type="cite"
cite="mid:JNZP275MB08677CE8B1853BE8461AC6A0F72A9@JNZP275MB0867.ZAFP275.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hi Folks,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Running MailScanner 5.3.4-3 on Centos 7,
I’m using, for SPF checking:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">pypolicyd-spf-1.3.2-5.el7.noarch<o:p></o:p></p>
<p class="MsoNormal">python-pyspf-2.0.14-13.el7.noarch<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Using these policyd-spf.conf settings:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">debugLevel = 2<o:p></o:p></p>
<p class="MsoNormal">defaultSeedOnly = 1<o:p></o:p></p>
<p class="MsoNormal">HELO_reject = SPF_Not_pass<o:p></o:p></p>
<p class="MsoNormal">Mail_From_reject = Fail<o:p></o:p></p>
<p class="MsoNormal">PermError_reject = False<o:p></o:p></p>
<p class="MsoNormal">TempError_Defer = False<o:p></o:p></p>
<p class="MsoNormal">skip_addresses =
127.0.0.0/8,::ffff:127.0.0.0/104,::1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Which seems to work fine, as it issues
warnings to servers that aren’t authorised to send for domains
that don’t have SPF records set up correctly. However, when I
do a command line test from a remote (unauthorised) server to
send mail through this server, it happily accepts the mail,
even though the unauthorised server is not in the SPF list.
The sending server is not whitelisted, I can’t understand why
it doesn’t get rejected by the SPF check.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Some advice or pointers would be greatly
appreciated. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you.<o:p></o:p></p>
<table class="MsoNormalTable" style="border-collapse:collapse"
cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr style="height:4.8pt">
<td colspan="2" style="width:376.1pt;padding:0cm 5.4pt 0cm
5.4pt;height:4.8pt" width="501" valign="top">
<p class="MsoNormal" style="line-height:105%"><b><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">___________________________________________________<o:p></o:p></span></b></p>
</td>
</tr>
<tr style="height:4.8pt">
<td style="width:219.75pt;padding:0cm 5.4pt 0cm
5.4pt;height:4.8pt" width="293" valign="top">
<p class="MsoNormal" style="line-height:105%"><b><span
style="font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Pramod
Daya</span></b><i><span
style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">
(</span></i><span
style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">CEO)</span><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><i><span
style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">M.Sc.
Computer Science (U. of Oregon)<o:p></o:p></span></i></p>
<p class="MsoNormal" style="line-height:105%"><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Unit
5, Melomed Office Park<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Punters
Way, Kenilworth<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Cape
Town, South Africa 7708<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span
style="mso-fareast-language:EN-ZA"><a
href="http://www.mindspring.co.za/"
moz-do-not-send="true"><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#0563C1">www.mindspring.co.za</span></a></span><span
style="mso-fareast-language:EN-ZA"><o:p></o:p></span></p>
</td>
<td style="width:156.35pt;padding:0cm 5.4pt 0cm
5.4pt;height:4.8pt" width="208" valign="top">
<p class="MsoNormal"
style="text-align:right;line-height:105%"
align="right"><b><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">
</span></b><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><img
style="width:1.2916in;height:.3125in"
id="Picture_x0020_8"
src="cid:part1.Gcltg0SL.TASerlJo@summitgrid.com"
class="" width="124" height="30" border="0"></span><b><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA"><o:p></o:p></span></b></p>
<p class="MsoNormal"
style="text-align:right;line-height:105%"
align="right"><b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Work:
</span></b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA"> +27
21 657 1780<o:p></o:p></span></p>
<p class="MsoNormal"
style="text-align:right;line-height:105%"
align="right"><b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Fax:
</span></b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">+27
21 671 7599<o:p></o:p></span></p>
<p class="MsoNormal"
style="text-align:right;line-height:105%"
align="right"><b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">
Cell:</span></b><span
style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">
+27 83 675 0367<span style="color:blue"><o:p></o:p></span></span></p>
<p class="MsoNormal"
style="text-align:right;line-height:105%"
align="right"><span
style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><a
href="mailto:pramod@mindspring.co.za"
moz-do-not-send="true"><span style="color:blue">pramod@mindspring.co.za</span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="mso-fareast-language:EN-ZA"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
</body>
</html>