• Bug#1106197: postfix-policyd-spf-python: SPF policy not reported for se

    From Filippo Giunchedi@21:1/5 to All on Wed May 21 02:50:01 2025
    Package: postfix-policyd-spf-python
    Version: 3.0.4-2
    Severity: important
    X-Debbugs-Cc: filippo@debian.org

    Dear Maintainer,
    policyd-spf reports no SPF for sender domains with trailing dot, even though the name is valid in DNS.

    Example reproducer:

    $ policyd-spf
    request=smtpd_access_policy
    protocol_state=RCPT
    protocol_state=SMTP
    helo_name=debian.org
    queue_id=12345FF
    instance=1234.5678
    sender=test@test.org.
    recipient=debian@debian.org
    client_address=8.8.8.8

    action=prepend Received-SPF: None (mailfrom) identity=mailfrom; client-ip=8.8.8.8; helo=debian.org; envelope-from=test@test.org.; receiver=debian.org

    Here SPF is reported as None, even though the result should be softfail
    instead with no trailing dot:

    request=smtpd_access_policy
    protocol_state=RCPT
    protocol_state=SMTP
    helo_name=debian.org
    queue_id=12345FF
    instance=1234.5678
    sender=test@test.org
    recipient=debian@debian.org
    client_address=8.8.8.8

    action=prepend Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=8.8.8.8; helo=debian.org; envelope-from=test@test.org; receiver=debian.org


    -- System Information:
    Debian Release: 13.0
    APT prefers testing
    APT policy: (500, 'testing')
    Architecture: amd64 (x86_64)
    Foreign Architectures: i386

    Kernel: Linux 6.12.25-amd64 (SMP w/4 CPU threads; PREEMPT)
    Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
    Shell: /bin/sh linked to /usr/bin/dash
    Init: systemd (via /run/systemd/system)
    LSM: AppArmor: enabled

    Versions of packages postfix-policyd-spf-python depends on:
    ii adduser 3.152
    ii postfix 3.10.2-1
    ii python3 3.13.3-1
    pn python3-spf-engine <none>

    postfix-policyd-spf-python recommends no packages.

    postfix-policyd-spf-python suggests no packages.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)