From nobody Sun Mar 1 07:09:55 2020 Return-Path: X-Original-To: spfbis@ietfa.amsl.com Delivered-To: spfbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E06F03A03EF for ; Sun, 1 Mar 2020 07:09:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.849 X-Spam-Level: X-Spam-Status: No, score=-1.849 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, SPF_PASS=-0.001, SPOOF_COM2OTH=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com header.b=YQVAvpX+; dkim=pass (1536-bit key) header.d=taugh.com header.b=BRsq+jpa Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EePf8wDyVmUz for ; Sun, 1 Mar 2020 07:09:49 -0800 (PST) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D6FA3A044A for ; Sun, 1 Mar 2020 07:09:49 -0800 (PST) Received: (qmail 31241 invoked from network); 1 Mar 2020 15:09:47 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=7a07.5e5bd03b.k2003; bh=LKfBuME0eH+HnP9QxfpjI5/VCgFRRUZ80stfEPVUEjI=; b=YQVAvpX+N6MtEn9pT6gUK1Tp0bJ5AkyQvqBOn8dWgB3atqh1zVKJw5g66oACwjqOaqNFTZg9RFh3D2fWEsgH3LZR3c9GCWxiwbXK43tUm9CzeJUUNSlSVmQ03z1MwgvWeiWUnc3frKl66twHbNKN9L3U9uz46DRS9EwD+e/5t/wXFQam+1zQ6x7vUlbRieGw+SFQKLi1A91vESOp8FkDzqZzki9cHJrNaPpbCgdOxgxJz9CMCOtKmwt/K2f+R/Yy DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=7a07.5e5bd03b.k2003; bh=LKfBuME0eH+HnP9QxfpjI5/VCgFRRUZ80stfEPVUEjI=; b=BRsq+jpa9KAn/u0pesg9iI48GrckApn9bwYZ1JeBnbLPd3UcHCISxx3+3DbsXJRXz4g4TkQ7HbdnnX4BJmy7rjlvpJIeNEQATIza6cX8UF0hCqB120PmLCc3cP3PKiJQJEO20HCHCxTjsP3p9x+ViAl/86TMu4r2nKpSOTLQ+0NHQGaXSwUAEX9a7eM3NIgGejHJEFbx0qMQjqxOOQ1LdT6jnPLY9DZpjgW/BYnRfvi0JmaEK/1Yjvn/K2PiWwT7 Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 01 Mar 2020 15:09:47 -0000 Received: by ary.qy (Postfix, from userid 501) id 3421E152A862; Sun, 1 Mar 2020 10:09:46 -0500 (EST) Date: 1 Mar 2020 10:09:46 -0500 Message-Id: <20200301150947.3421E152A862@ary.qy> From: "John Levine" To: spfbis@ietf.org Cc: frnkblk@iname.com In-Reply-To: <001501d5edf8$de80c130$9b824390$@iname.com> Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit Archived-At: Subject: Re: [spfbis] SPF-checking tool X-BeenThere: spfbis@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SPFbis discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Mar 2020 15:09:52 -0000 In article <001501d5edf8$de80c130$9b824390$@iname.com> you write: >I also understand your feedback billtrust.com -- but it is helpful to be >made aware of this kind of problem. The DMARC record in the wrong place is the least of billtrust's problems: _dmarc.billtrust.com. 3600 IN CNAME www.billtrust.com. www.billtrust.com. 600 IN CNAME www.billtrust.com.cdn.cloudflare.net. -- Regards, John Levine, johnl@taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly From nobody Mon Mar 9 20:35:21 2020 Return-Path: X-Original-To: spfbis@ietfa.amsl.com Delivered-To: spfbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 660D73A0E88 for ; Mon, 9 Mar 2020 20:35:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.397 X-Spam-Level: X-Spam-Status: No, score=-0.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.998, SPF_FAIL=0.001, SPOOF_COM2OTH=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cHX2NKrwCB7x for ; Mon, 9 Mar 2020 20:35:08 -0700 (PDT) Received: from premieronline.net (mail.premieronline.net [IPv6:2607:fe28:0:4000::10]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D35F3A0E89 for ; Mon, 9 Mar 2020 20:35:02 -0700 (PDT) X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=199.120.69.4; envelope-from=; Received: from FBULKPC (unverified [199.120.69.4]) by premieronline.net (SurgeMail 7.4f) with ESMTP id 13648311-1729245 for multiple; Mon, 09 Mar 2020 22:32:44 -0500 From: "Frank Bulk" To: "'Stuart D Gathman'" , "John Levine" Cc: , References: <20200301150947.3421E152A862@ary.qy> In-Reply-To: Date: Mon, 9 Mar 2020 22:32:43 -0500 Message-ID: <000001d5f68c$8fd67ab0$af837010$@iname.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdXstTWAX0UO2VeETfGQ8rkT9QwrKgAvbOWAAAIkEGAAF5HuAAAFBuyAAIf33QAAM2D1AAAPWVNA Content-Language: en-us X-Originating-IP: 199.120.69.4 X-Vpipe: restarted=25 started /var/surgemail/scavs.pl (/var/surgemail/scavs.pl) X-SpamDetect: : -6.5 sd=-6.5 0.02(X-SpamContent:clean) 0.04(X-myrbl:Color=white) 0.74(Received:for multiple) [nnot=2, ng=2, nsum=0, nb=0, nw=2, -10.54] X-SpamContent: Clean X-LangGuess: English X-MyRbl: Color=White (rbl) Age=0 Spam=0 Notspam=0 Stars=0 Good=109 Friend=0 Surbl=0 Catch=0 r=0 ip=199.120.69.4 X-IP-stats: Incoming Last 0, First 118, in=26325, out=0, spam=0 ip=199.120.69.4 Archived-At: Subject: Re: [spfbis] SPF-checking tool X-BeenThere: spfbis@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SPFbis discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Mar 2020 03:35:19 -0000 Thanks for considering it -- I'd be happy to test it again the domains in our dataset. Frank -----Original Message----- From: Stuart D Gathman Sent: Monday, March 2, 2020 9:41 AM To: John Levine Cc: spfbis@ietf.org; frnkblk@iname.com Subject: Re: [spfbis] SPF-checking tool I don't know when I'm going to work on it, but this exchange has convinced me we need an SPF lint tool. This would not be in the the spf.py module - but may import the module to reuse the same code as much as possible. Some features: 1) Fetch all records reachable from a policy. 2) Report all syntax errors in reachable records. 3) Compute worst case number of lookups 4) Compute an ipset for all SPF results for both IPv4 and IPv6 (spf.py has a naive implementation of computing the Pass set that doesn't handle mechanisms with results other than Pass. It was trivial to do and is useful - that's my excuse.) On Sun, 1 Mar 2020, John Levine wrote: > In article <001501d5edf8$de80c130$9b824390$@iname.com> you write: >> I also understand your feedback billtrust.com -- but it is helpful to be >> made aware of this kind of problem. > > The DMARC record in the wrong place is the least of billtrust's problems: > > _dmarc.billtrust.com. 3600 IN CNAME www.billtrust.com. > www.billtrust.com. 600 IN CNAME www.billtrust.com.cdn.cloudflare.net.