pypolicyd-spf

Domain is still testing its SPF policy, so the message should not have been rejected.

Asked by Daren Hayward

Recently an email received was rejected, upon contacting the SPF record holder they informed me that the domain was under testing and referred me to the following link.

http://www.openspf.org/Why?s=helo;id=babyhuyswebshop.nl;ip=91.195.201.55;<email address hidden>;

Is there a way to configure SPF to allow messages which have "soft" failed and mark those messages for identification later?

Question information

Language:
English Edit question
Status:
Solved
For:
pypolicyd-spf Edit question
Assignee:
No assignee Edit question
Solved by:
Daren Hayward
Solved:
Last query:
Last reply:
Revision history for this message
Daren Hayward (launmhpad) said : 		#1

I've partially solved this after finding the file policyd-spf.conf.commented in the code section.

I've changed the HELO_reject from SPF_Not_Pass to Fail and soft fail messages now make it through and spamassassin assigns it a score of 0.896.

I guess the last part is identifying the message as SPF soft fail is a configuration for spamassassin.

Revision history for this message
Scott Kitterman (kitterman) said : 		#2

Yes. That's the package default. Post a copy of your config file to the question and the relevant snippets from your postfix log and I'll take a look.

Revision history for this message
Daren Hayward (launmhpad) said : 		#3

I didn't change anything from the default configuration as Gentoo installed it, so I guess they modify the file. Once I found this and changed it back to the package default soft fail works as expected to the required RFC for email.

Thanks for your help.

Revision history for this message
Scott Kitterman (kitterman) said : 		#4

Just for reference,

I expected your question was about a Mail From based reject, not HELO. For HELO_reject , SPF_Not_Pass is the upstream default. It's very safe as HELO SPF records are hard to get wrong.

The SPF policy server adds a Received-SPF header field to the message that SpamAssassin will consume to get an SPF result, so it's entirely expected you'd see an effect on the spam score.