Testing the invocation of spfquery.mail-spf-perl from your patch, it
appears that the --mfrom and --helo options imply mutually exclusive
modes of operation (or rather, --helo overrides --mfrom completely
when specified). The manpage also implies this, as well as stating
that --helo and --mfrom are deprecated in favor of --scope and
--identity options. As a result, an E-mail can have any
$sender_address the originating system wishes to spoof as long as
the $sender_helo_name uses a different domain. An additional
conditional is probably warranted, perhaps only checking with
--scope helo --identity \"$sender_helo_name\" when $sender_address
is empty.
--
{ IRL(Jeremy_Stanley); WWW(http://fungi.yuggoth.org/); PGP(43495829);
WHOIS(STANL3-ARIN); SMTP(fu...@yuggoth.org); FINGER(fu...@yuggoth.org);
MUD(kin...@katarsis.mudpy.org:6669); IRC(fu...@irc.yuggoth.org#ccl);
ICQ(114362511); YAHOO(crawlingchaoslabs); AIM(dreadazathoth); }
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
