Return-Path: 
 <users-return-70416-apmail-spamassassin-users-archive=spamassassin.apache.org@spamassassin.apache.org>
Delivered-To: apmail-spamassassin-users-archive@www.apache.org
Received: (qmail 51753 invoked from network); 5 Jun 2008 17:13:28 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 5 Jun 2008 17:13:28 -0000
Received: (qmail 25741 invoked by uid 500); 5 Jun 2008 17:13:20 -0000
Delivered-To: apmail-spamassassin-users-archive@spamassassin.apache.org
Received: (qmail 25720 invoked by uid 500); 5 Jun 2008 17:13:20 -0000
Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:users-help@spamassassin.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@spamassassin.apache.org>
List-Post: <mailto:users@spamassassin.apache.org>
List-Id: <users.spamassassin.apache.org>
Delivered-To: mailing list users@spamassassin.apache.org
Received: (qmail 25709 invoked by uid 99); 5 Jun 2008 17:13:20 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 05 Jun 2008 10:13:20 -0700
X-ASF-Spam-Status: No, hits=1.5 required=10.0
	tests=IP_LINK_PLUS,NORMAL_HTTP_TO_IP,SPF_HELO_PASS,SPF_PASS,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of dbfunk@engineering.uiowa.edu
 designates 128.255.18.25 as permitted sender)
Received: from [128.255.18.25] (HELO mail.engineering.uiowa.edu)
 (128.255.18.25)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 05 Jun 2008 17:12:21 +0000
Received: from d-is00.icaen.uiowa.edu (d-is00.icaen.uiowa.edu [128.255.17.30])
	(authenticated user=dbfunk bits=0)
	by mail.engineering.uiowa.edu (8.13.2/mail-MSA-1.8) with ESMTP id
 m55HCYiq017841
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
	 (envelope-from <dbfunk@engineering.uiowa.edu>) Thu,
 5 Jun 2008 12:12:34 -0500 (CDT)
Date: Thu, 5 Jun 2008 12:12:34 -0500 (CDT)
From: David B Funk <dbfunk@engineering.uiowa.edu>
To: Benny Pedersen <me@junc.org>
cc: users@spamassassin.apache.org
Subject: Re: spf testing in Barracuda seems not working well :/
In-Reply-To: <46884.RkEUX0YQVF8=.1212665027.squirrel@mail.junc.org>
Message-ID: <Pine.HPX.4.58.0806051207260.6327@d-is00.icaen.uiowa.edu>
References: <46884.RkEUX0YQVF8=.1212665027.squirrel@mail.junc.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Virus-Checked: Checked by ClamAV on apache.org

On Thu, 5 Jun 2008, Benny Pedersen wrote:

>
> http://www.openspf.org/Why?id=me%40junc.org&ip=81.144.166.100&receiver=athena.apache.org
>
> what did really happend here ?
>
> X-Barracuda-URL: http://192.168.70.61:8000/cgi-bin/mark.cgi
> X-Barracuda-Connect: hermes.apache.org[140.211.11.2]
> X-Barracuda-Start-Time: 1212494773
> X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at maelbox.com
>
> i hope one have not paid to much for this :-)

According to that URL, the host athena.apache.org received a message from
an SMTP server with the IP address of 81.144.166.100, wanting to send a
message with the envelope FROM address of "me@junc.org".

The SPF record published for junc.org says:
  "v=spf1 ip4:80.166.47.252/30 ip4:80.166.75.16/29 -all"

the IP address 81.144.166.100 is -not- in that SPF record's allowed range
and that record ends with a "-all" so it would seem that the correct
thing to do would be to reject that message as a disallowed imposterer.

So what was your question?

-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{