Bug#606000: libmail-spf-query-perl: Incorrect query results with IPv6 addresses; should warn about missing IPv6 support and/or fail graciously

[Torsten Jerzembeck]

Hi Gregor,

gregor herrmann wrote:
>On Sun, 05 Dec 2010 13:37:19 +0100, Torsten Jerzembeck wrote:
>> Using Mail::SPF::Query with an IPv6 enabled mailserver (increasingly
>> common today, and bound to get even more common due to the shortage of
>> IPv4 addresses) leads to mail being blocked incorrectly.
>Could you please give an example of a domain/mailserver which uses
>IPv6 and SPF? I'd like to do some tests and it would be easier with
>an example :)

In my installation the bug was triggered by mail from an user of the
domain "marzen.de":

toje at falcon:~$ dig txt marzen.de
[...]
;; ANSWER SECTION:
marzen.de.		3510	IN	TXT	"v=spf1 a mx ip6:2001:6f8:98b::/48
ip4:192.109.53.0/24 -all"
[...]

toje at falcon:~$ dig mx marzen.de
[...]
;; ANSWER SECTION:
marzen.de.		3475	IN	MX	10 mail.marzen.de.
marzen.de.		3475	IN	MX	20 postfix.saar.de.
marzen.de.		3475	IN	MX	30 mail2.marzen.de.
[...]
;; ADDITIONAL SECTION:
mail.marzen.de.		3475	IN	A	193.141.107.90
mail.marzen.de.		3475	IN	AAAA	2001:6f8:98b::a42:3592
postfix.saar.de.	153236	IN	A	192.109.53.18
postfix.saar.de.	153236	IN	AAAA	2001:4dd0:ff7f::18
mail2.marzen.de.	3475	IN	A	192.109.53.242

>> The "spfquery" helper script used in the example configuration for exim4
>Hm, the file shipped in the package
>(/usr/share/doc/libmail-spf-query-perl/examples/exim-acl) doesn't use
>spfquery but spfd. #376545 suggests an alternative which uses
>spfquery.

I think that this part of my setup is rather old, and I don't know any
more why I decided to go this way rather than using spfd, unfortunately.

Many thanks for your quick action in this case!

Greetings from Bad Cannstatt,

=ToJe=

-- 
    Torsten Jerzembeck * Oberschlesische Str. 61 * D-70374 Stuttgart
Exil-Westfale * PGP: B74DB58D * MIME welcome * Generation Tux * ><o(((°>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20101205/398d126e/attachment.pgp>