Bug 8022 - SPF check with "v=spf1 -all"
Summary: SPF check with "v=spf1 -all"
Status: RESOLVED INVALID
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: unspecified
Hardware: PC Windows 7
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-08-10 14:14 UTC by Zandir Boerd
Modified: 2022-08-10 15:06 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Zandir Boerd 2022-08-10 14:14:36 UTC 
SPF_PASS is useless for records like "v=spf1 -all" since any IP address matches this kind of a record. 

Example:
https://mxtoolbox.com/SuperTool.aspx?action=spf%3aneckby.ru.com&run=toolpage
Comment 1 Bill Cole 2022-08-10 15:06:27 UTC 
(In reply to Zandir Boerd from comment #0)
> SPF_PASS is useless for records like "v=spf1 -all" since any IP address
> matches this kind of a record. 
> 
> Example:
> https://mxtoolbox.com/SuperTool.aspx?action=spf%3aneckby.ru.com&run=toolpage

NO IP matches such a SPF record. '-all' makes a 'hard fail' the default, and since there are no mechanisms that would cause a 'pass' in the record, all IPs fail. 

That is a valid SPF record for domains whose owners do not allow mail from theier domain as a matter of policy. 

If you have a sample of mail using 'neckby.ru.com' which SpamAssassin marked with SPF_PASS, please provide that evidence. Otherwise, I can see no SpamAssassin bug here.