15.6 Testing SPF using spfquery
This testing utility can be used to test SPF processing.
Note –
spfquery does not test your SPF configuration. It tests what would be returned if you were to enable SPF processing.
Requirements: Must be run as a user who has access to run the Messaging Server binaries and access its libraries such as root or mailsrv, for example.
Location: msg-svr-base/sbin/
15.6.1 Syntax
spfquery [-i ip-address] [-s sender-email] [-h helo-domain] [-e none | neutral | pass | fail | temperror | permerror] [-v] [-V] [?] domain |
The following table shows the spfquery options and their descriptions.
Table 15–5 spfquery options|
Option |
Description |
|
|---|---|---|
|
-i ip address |
Specifies the IP address to be used as the remote address for the SPF query. Default is 127.0.0.1. This option can also be --ip-address. |
|
|
-s domain |
The email address that will be used as if it were specified as MAIL FROM:. Default: postmaster@domain. This option can also be --sender |
|
|
-h helo-domain |
The domain name as if it were specified for the HELO domain. Note that this domain is not verified itself, but instead provided as supplemental information for macro processing. Default value is the same as the value you specified for domain. This option can also be --helo-domain |
|
|
-e result |
spfquery will compare the result of the SPF processing with what is expected and if the result is different, a message will be printed and spfquery will exit with a non-zero return status; result can be one of: none, neutral, pass, fail, softfail, temperror, or permerror. This option can also be --expect. |
|
|
-v |
Enables verbose output during SPF processing. This option can also be --verbose. |
|
|
-V |
Prints the current version of the SPF library. This option can also be --version. |
|
|
Prints this usage information. This option can also be --help. |
15.6.2 Example with Debugging Enabled
# /opt/SUNWmsgsr/sbin/spfquery -v -i 192.168.1.3 11.spf1-test.siroe.com
Running SPF query with:
IP address: 192.168.1.3
Domain: 11.spf1-test.siroe.com
Sender: postmaster@11.spf1-test.siroe.com (local-part: postmaster)
HELO Domain: 11.spf1-test.siroe.com
15:30:04.33: ----------------------------------------------------------------
15:30:04.33: SPFcheck_host called:
15:30:04.33: source ip = 192.168.1.3
15:30:04.33: domain = 11.spf1-test.siroe.com
15:30:04.33: sender = postmaster@11.spf1-test.siroe.com
15:30:04.33: local_part = postmaster
15:30:04.33: helo_domain = 11.spf1-test.siroe.com
15:30:04.33:
15:30:04.33: Looking up "v=spf1" records for 11.spf1-test.siroe.com
15:30:04.35: DNS query status: Pass
15:30:04.35: "v=spf1 mx:spf1-test.siroe.com -all"
15:30:04.35:
15:30:04.35: Parsing mechanism: " mx : spf1-test.siroe.com"
15:30:04.35: Assuming a Pass prefix
15:30:04.35: Processing macros in spf1-test.siroe.com
15:30:04.35: Comparing against 192.168.1.3
15:30:04.35: Looking for MX records for spf1-test.siroe.com
15:30:04.41: mx02.spf1-test.siroe.com:
15:30:04.41: 192.0.2.22 - No match
15:30:04.41: 192.0.2.21 - No match
15:30:04.41: 192.0.2.20 - No match
15:30:04.41: 192.0.2.23 - No match
15:30:04.41: mx01.spf1-test.siroe.com:
15:30:04.42: 192.0.2.13 - No match
15:30:04.42: 192.0.2.11 - No match
15:30:04.42: 192.0.2.12 - No match
15:30:04.42: 192.0.2.10 - No match
15:30:04.42: mx03.spf1-test.siroe.com:
15:30:04.42: 192.0.2.32 - No match
15:30:04.42: 192.0.2.30 - No match
15:30:04.42: 192.0.2.31 - No match
15:30:04.42: 192.168.1.3 - Matched
15:30:04.42: Mechanism matched; returning Pass
15:30:04.42:
15:30:04.42: Parsing mechanism: "- all : " (not evaluated)
15:30:04.42:
15:30:04.42: SPFcheck_host is returning Pass
15:30:04.42: ----------------------------------------------------------------
|
- © 2010, Oracle Corporation and/or its affiliates