1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
.TH s/qmail: spfquery 8
.SH NAME
spfquery \- SPF test program
.SH SYNOPSIS
.B spfquery
.I sender-ip
.I sender-helo
.I envelope-from
.I [local rules]
.I [-v]
.SH DESCRIPTION
.B spfquery
is a test program to allow evaluation
of
.I SPF records
fetched on demand by means of
.BR qmail-smtpd .
.SH "ARGUMENTS"
.B spfquery
uses the given arguments
.IR sender-ip ,
.IR sender-helo ,
and
.I envelope-from
to perform a DNS SPF TXT lookup
and evaluates the results.
In addition, \'local-rules\' might
be included as
.IR local-rules .
By means of the (last) option
.I -v
a verbose output is provided.
.SH "RESPONSE"
The result of
.B spfquery
shows the SPF return codes of the retrieved
information after the DNS evaluation.
Additionally, the mechanisms and
results are displayed as chain
of resulting codes. In case the option
.I -v
is given, the received DNS SPF TXT records
for the analysed domain are shown in raw
format to allow further diagnostics.
.SH "SPF MECHANISMS"
.B spfquery
and of course
.B qmail-smtpd
support all mechanisms defined in
.IR RFC\ 7208 ,
in particular:
.IR A/AAAA ,
.IR IPv4 ,
.IR IPv6 ,
.IR MX ,
.IR PTR ,
.IR Exists .
Nesting of SPF records - indicated by the commands
.I include:
and
.I redirect=
- is allowed and the chain is followed.
Further,
.I exp(lanation)=
is supported.
.SH "SPF QUALIFIERS"
SPF makes uses of command and explanation qualifiers.
Command and explanation characters are:
.I +
pass (default),
.I -
fail,
.I ~
softfail,
.I ?
neutral.
.SH "EXPLANATION CHARACTERS"
This implementation uses the following
additional explanation characters:
.I o
none,
.I u
unknown,
.I d
DNS problem (not used).
.SH "MACRO EXPANSION"
Macros (keyword) expansion is supported conforming to
.IR RFC\ 7208 .
.SH "SPF EVALUATION"
.B spfquery
provides a brief summary of results for the evaluation:
.I S
the sending IP,
.I O
the envelope-from address,
.I C
the requested domain for lookup,
.I H
the HELO/EHLO of the contacted MTA,
.I M
the SPF lookup mechanis as explained,
.I I
the included domanin for lookup,
.I D
the (re)direct to follow,
.I P
a potential problem observed.
These letters are followed by an equal sign '='
and detail the information.
.I R
is the lookup result obtained, followed by a
colon ':'.
.SH "DIAGNOSTICS"
Additional DNS diagnostic routines are available:
.B dnstxt
returns the DNS TXT for
.IR host .
.B dnsptr
returns the DNS PTR for
.IR IP .
.B dnsmxip
returns the MTA IPs for
.IR domain .
.SH "CREDITS"
The
.B spfquery
program and the SPF integration into
.B s/qmail
follows mainly the implementation of
Jana Saout (http://www.saout.de/misc/spf/)
and is used by permission.
.SH "SEE ALSO"
qmail-control(5),
qmail-smtpd(8)
dnsmxip(8),
dnstxt(8).
|
