per user regex/domain issues

[Scott Kitterman]

The policyd-spf.peruser.5 man page mentions regexp for user matching.
"
       In addition to specifying individual users, regular expression matching
       is also available, but may have performance implications since the
       entire user table has to be traversed for each message recipient.
"

However, the code does a simple string comparison.
http://bazaar.launchpad.net/~kitterman/pypolicyd-spf/trunk/view/head:/policydspfuser.py#L78

A simple implementation would be have it check the domain as well so that I could specify something like

example.net,Domain_Whitelist=google.com

So that mails sent to any recipient of the domain example.net is allowed to be forwarded via google.com but any other recipients sent from google.com are subject to the regular SPF checks.

A simple additional test on line 78 would probably solve this.
if user != recipient and user != recipient.split("@")[1]:

[Scott Kitterman (kitterman)]

pypolicyd-spf is in maintenance only mode. Transferring to spf-engine for future consideration.