Package: spfquery
Version: 1.2.10-7+b2
Severity: grave
Tags: ipv6
Justification: causes non-serious data loss

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

I got notified that another organization was unable to mail us. This didn't 
happen
all the time, but every few e-mail. The error logged by sendmail was 'Void 
lookup limit exceeded'.
I then had a loop running, doing spfquery for that domain every 5 seconds. When 
the next
fail in the mail-log came, the spfquery test succeeded. 

I then noted that running spfquery for that domain, with an IPv6 address always 
returns
"void lookup limit of 2 exceeded"

 spfquery --sender=some.u...@mdh.se --ip=2001:708:170:33::200
permerror
SPF Permanent Error: Void lookup limit of 2 exceeded
spfquery: permanent error in processing domain of mdh.se: Void lookup limit of 
2 exceeded
Received-SPF: PermError (spfquery: permanent error in processing domain of 
mdh.se: Void lookup limit of 2 exceeded) client-ip=2001:708:170:33::200; 
envelope-from="some.u...@mdh.se"; receiver=spfquery; identity=mailfrom

# apt-show-versions spfquery libspf2-2
libspf2-2:amd64/stretch 1.2.10-7+b2 uptodate
spfquery:amd64/stretch 1.2.10-7+b2 uptodate

Running the same on an Ubuntu 17.10 always succeeds;

$ spfquery --sender=some.u...@mdh.se --ip=2a01:0111:f400:fe1e::0712 
pass

spfquery: domain of mdh.se designates 2a01:111:f400:fe1e::712 as permitted 
sender
Received-SPF: pass (spfquery: domain of mdh.se designates 
2a01:111:f400:fe1e::712 as permitted sender) client-ip=2a01:111:f400:fe1e::712; 
envelope-from=some.u...@mdh.se;

$ apt-show-versions spfquery libspf2-2
libspf2-2:amd64/artful 1.2.10-7build2 uptodate
libspf2-2:i386 not installed
spfquery:amd64/artful 1.2.10-7build2 uptodate
spfquery:i386 not installed


This leads me to believe there's a bug in debian's implementation.


   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-6-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages spfquery depends on:
ii  libc6      2.24-11+deb9u1
ii  libspf2-2  1.2.10-7+b2

spfquery recommends no packages.

spfquery suggests no packages.

-- no debconf information

Reply via email to