libspf2-2 1.2.9-4 returns incorrect response with IPv6 SPF Record
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu Japanese Kaizen Project |
New
|
Undecided
|
Unassigned | ||
libspf2 (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Lucid |
Won't Fix
|
High
|
Unassigned | ||
Precise |
Won't Fix
|
High
|
Unassigned |
Bug Description
lucid 上で postfix, milter-greylist, libspf2-2 の組み合わせでメールサーバを構
libspf2-2 を使用するツール spfquery を使用して確認したところ、lucid, precise の libspf2-2 1.2.9-4 では再現しますが、raring の 1.2.9-7 では解消しているようです。lucid, precise のパッケージについても修正して
1. SMTP sender and SPF record
Sender: 日本厚生労働省 (Japanese The Ministry of Health, Labour and Welfare)
SMTP MAIL FROM domain: @mhlw.go.jp
SMTP client IPv6 address: 2400:4040:
m-ogino@mx1:~$ host -t txt mhlw.go.jp
mhlw.go.jp descriptive text "v=spf1 include:
m-ogino@mx1:~$ host -t txt spf-ikou.mhlw.go.jp
spf-ikou.mhlw.go.jp descriptive text "v=spf1 +ip4:210.
spf-ikou.mhlw.go.jp の +ip6:2400:
2. spfquery result on lucid (incorrect)
m-ogino@mx1:~$ lsb_release -d
Description: Ubuntu 10.04.4 LTS
m-ogino@mx1:~$ dpkg -l postfix milter-greylist libspf2-2 spfquery
Desired=
| Status=
|/ Err?=(none)
||/ Name Version Description
+++-===
ii libspf2-2 1.2.9-4 library for validating mail senders with SPF
ii milter-greylist 4.3.4-2 Greylist milter for sendmail
ii postfix 2.7.0-1ubuntu0.2 High-performance mail transport agent
ii spfquery 1.2.9-4 query SPF (Sender Policy Framework) to validate mail
m-ogino@mx1:~$ spfquery -ip 2400:4040:
fail
Please see http://
spfquery: domain of mhlw.go.jp does not designate 2400:4040:
Received-SPF: fail (spfquery: domain of mhlw.go.jp does not designate 2400:4040:
3. spfquery result on raring (good)
m-ogino@
Description: Ubuntu 13.04
m-ogino@
Desired=
| Status=
|/ Err?=(none)
||/ Name Version Architecture Description
+++-===
ii libspf2-2 1.2.9-7 amd64 library for validating mail senders with S
ii spfquery 1.2.9-7 amd64 query SPF (Sender Policy Framework) to val
m-ogino@
pass
spfquery: domain of mhlw.go.jp designates 2400:4040:
Received-SPF: pass (spfquery: domain of mhlw.go.jp designates 2400:4040:
tags: | added: patch patch-accepted-debian |
Ogino様、 バグ報告ありがとうございます。 ドイツのロルフです。 お世話になります。
The libspf2-2 package in lucid and precise returns incorrect information for IPv6 queries. Going by the changelog this was fixed in 1.2.9-6 in Debian and thus Quantal and later should not be affected. The relevant changes will need to be backported.