Comment 1 for bug 707497

I had a chance to look at this now and there is no bug here. In your by hand testing it looks like you failed to include helo_name= which causes the results that look like:

Jan 25 10:00:00 houston postfix/policy-spf[24240]: :HELO check failed - Mail::SPF->new(, , ) failed: Missing required 'identity' option
Jan 25 10:00:00 houston postfix/policy-spf[24240]: : Policy action=DUNNO

You'll see the policy server reaches the correct result (DUNNO) in this case, so it's not a bug.