Bug#280484: marked as done (SPF not working/enabled in exiscan patch)

Debian Bug Tracking System owner@bugs.debian.org
Tue, 09 Nov 2004 12:33:08 -0800


Your message dated Tue, 9 Nov 2004 21:21:58 +0100
with message-id <20041109202158.GA960@downhill.at.eu.org>
and subject line Bug#280484: SPF not working/enabled in exiscan patch
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 9 Nov 2004 19:51:21 +0000
>From kk@verfaction.de Tue Nov 09 11:51:20 2004
Return-path: <kk@verfaction.de>
Received: from nyx.verfaction.de [212.9.161.72] (Debian-exim)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CRc1Q-0005TM-00; Tue, 09 Nov 2004 11:51:20 -0800
Received: from kk by nyx.verfaction.de with local (Exim 4.34)
	id 1CRc1N-0003k6-1H; Tue, 09 Nov 2004 20:51:17 +0100
MIME-Version: 1.0
From: Kilian Krause <kk@verfaction.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
X-Mailer: reportbug 2.63
Date: Tue, 09 Nov 2004 20:51:17 +0100
Message-Id: <E1CRc1N-0003k6-1H@nyx.verfaction.de>
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: kk@verfaction.de
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: SPF not working/enabled in exiscan patch
X-SA-Exim-Version: 4.1 (built Tue, 17 Aug 2004 11:06:07 +0200)
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: exim4-daemon-heavy
Version: 4.34-6
Severity: normal

As the original exiscan (http://duncanthrax.net/exiscan-acl/) reads that
it should have native SPF in it, i wonder how come i cannot use the
config sniplet like in
http://www.tldp.org/HOWTO/Spam-Filtering-for-MX/exim-spf.html:
-(snip)-
# Query the SPF information for the sender address domain, if any,
# to see if the sending host is authorized to deliver its mail.
# If not, reject the mail.
#
deny
	message     = [SPF] $sender_host_address is not allowed to send mail \
		      from $sender_address_domain
	log_message = SPF check failed.
	spf         = fail


# Add a SPF-Received: header
# to the message
warn
	message     = $spf_received

-(snip)-


Not that the page wouldn't have warned me, but what's the rationale i
have to go thru forking an extra task (spfquery) when the exiscan-acl
should have it already in the first place?!

-- Package-specific info:
Exim version 4.34 #1 built 11-Sep-2004 12:28:23
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 3.2.9: (May 26, 2004)
Support for: iconv() IPv6 PAM Perl GnuTLS
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
Authenticators: cram_md5 plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Contains exiscan-acl patch revision 21 (c) Tom Kistner [http://duncanthrax.net/exiscan/]
Configuration file is /var/lib/exim4/config.autogenerated

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (800, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.27
Locale: LANG=C, LC_CTYPE=C

Versions of packages exim4-daemon-heavy depends on:
ii  exim4-base                  4.34-6       EXperimental Internal Mailer -- a 
ii  libc6                       2.3.2.ds1-18 GNU C Library: Shared libraries an
ii  libdb3                      3.2.9-20     Berkeley v3 Database Libraries [ru
ii  libgnutls11                 1.0.16-9     GNU TLS library - runtime library
ii  libldap2                    2.1.30-3     OpenLDAP libraries
ii  libmysqlclient10            3.23.56-2    LGPL-licensed client library for M
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libpcre3                    4.5-1.1      Perl 5 Compatible Regular Expressi
ii  libperl5.8                  5.8.4-3      Shared Perl library
ii  libpq3                      7.4.6-2      Shared library libpq.so.3 for Post

-- no debconf information

---------------------------------------
Received: (at 280484-done) by bugs.debian.org; 9 Nov 2004 20:21:59 +0000
>From ametzler@downhill.at.eu.org Tue Nov 09 12:21:59 2004
Return-path: <ametzler@downhill.at.eu.org>
Received: from server.logic.univie.ac.at [131.130.190.41] ([hpI313sHvd98wgGmznB9ncLF+ThJZgYK])
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CRcV5-0000ek-00; Tue, 09 Nov 2004 12:21:59 -0800
Received: from m-134-246.adsl.univie.ac.at ([131.130.134.246])
	by server.logic.univie.ac.at with asmtp (Exim 4.34)
	id 1CRcV1-0004r9-Mv
	for 280484-done@bugs.debian.org; Tue, 09 Nov 2004 21:21:57 +0100
Received: from ametzler by downhill.univie.ac.at with local (Exim 4.34)
	id 1CRcV4-0000Ft-4s
	for 280484-done@bugs.debian.org; Tue, 09 Nov 2004 21:21:58 +0100
Date: Tue, 9 Nov 2004 21:21:58 +0100
From: Andreas Metzler <ametzler@downhill.at.eu.org>
To: 280484-done@bugs.debian.org
Subject: Re: Bug#280484: SPF not working/enabled in exiscan patch
Message-ID: <20041109202158.GA960@downhill.at.eu.org>
References: <E1CRc1N-0003k6-1H@nyx.verfaction.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <E1CRc1N-0003k6-1H@nyx.verfaction.de>
X-GPG-Fingerprint: BCF7 1345 BE42 B5B8 1A57  EE09 1D33 9C65 8B8D 7663
User-Agent: Mutt/1.5.6+20040722i
Delivered-To: 280484-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

On 2004-11-09 Kilian Krause <kk@verfaction.de> wrote:
[...]
> Not that the page wouldn't have warned me, but what's the rationale i
> have to go thru forking an extra task (spfquery) when the exiscan-acl
> should have it already in the first place?!
[...]

Quoting /usr/share/doc/exim4-base/README.Debian.gz
Rationale:
* SPF imho has not reached the necessary amount of
standardization an acceptance for inclusion in a Debian/stable
release, it is still in flux.

* I do not want to drag in another library dependency.

* Checking with spfd http://packages.debian.org/libmail-spf-query-perl
instead of exiscan's spf-condition offers the same functionality, afaict.

* spamassassin 3.0 will include SPF support, too.

* I do not want to encourage SPF because I am not convinced of its
benefits. (Discussion and links on benefits and downsides of SPF are
not listed here intentionally.)
------------------

              cu andreas
-- 
"See, I told you they'd listen to Reason," [SPOILER] Svfurlr fnlf,
fuhggvat qbja gur juveyvat tha.
Neal Stephenson in "Snow Crash"