Re: [spfbis] SPDF Domain Name Syntax

Mark Andrews <marka@isc.org> Tue, 03 May 2016 02:39 UTC

Return-Path: <marka@isc.org>
X-Original-To: spfbis@ietfa.amsl.com
Delivered-To: spfbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A5DF12D67A for <spfbis@ietfa.amsl.com>; Mon, 2 May 2016 19:39:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.924
X-Spam-Level:
X-Spam-Status: No, score=-5.924 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DEAR_SOMETHING=1.973, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VeZL4TodIz6n for <spfbis@ietfa.amsl.com>; Mon, 2 May 2016 19:39:46 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [IPv6:2001:500:60::65]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B560212B042 for <spfbis@ietf.org>; Mon, 2 May 2016 19:39:46 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.ams1.isc.org (Postfix) with ESMTPS id 6B8E71FCAB7; Tue, 3 May 2016 02:39:43 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 4258616006A; Tue, 3 May 2016 02:39:42 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 29BC0160067; Tue, 3 May 2016 02:39:42 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uyp7S4LP1AhJ; Tue, 3 May 2016 02:39:42 +0000 (UTC)
Received: from rock.dv.isc.org (c122-106-161-187.carlnfd1.nsw.optusnet.com.au [122.106.161.187]) by zmx1.isc.org (Postfix) with ESMTPSA id BA111160048; Tue, 3 May 2016 02:39:41 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id 492ED47DB7D7; Tue, 3 May 2016 12:39:38 +1000 (EST)
To: Tobias Perschon <tobias@perschon.at>
From: Mark Andrews <marka@isc.org>
References: <AM4PR09MB065930FACFA477EA02EE919ADD790@AM4PR09MB0659.eurprd09.prod.outlook.com>
In-reply-to: Your message of "Mon, 02 May 2016 18:55:37 +0000." <AM4PR09MB065930FACFA477EA02EE919ADD790@AM4PR09MB0659.eurprd09.prod.outlook.com>
Date: Tue, 03 May 2016 12:39:38 +1000
Message-Id: <20160503023938.492ED47DB7D7@rock.dv.isc.org>
Archived-At: <http://mailarchive.ietf.org/arch/msg/spfbis/Am5AjL73Ccy0UhjT40xd8O8c5Ck>
Cc: "spfbis@ietf.org" <spfbis@ietf.org>
Subject: Re: [spfbis] SPDF Domain Name Syntax
X-BeenThere: spfbis@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SPFbis discussion list <spfbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spfbis>, <mailto:spfbis-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spfbis/>
List-Post: <mailto:spfbis@ietf.org>
List-Help: <mailto:spfbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spfbis>, <mailto:spfbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 May 2016 02:39:48 -0000

In message <AM4PR09MB065930FACFA477EA02EE919ADD790@AM4PR09MB0659.eurprd09.prod.outlook.com>, Tobias Perschon writes:
> Dear Sir or Madam,
>
> I have a question regarding RFC 7208. Is a domain name e.g. for an "a:"
> directive supposed to be a FQDN; more precisely: can a domain name
> contain a trailing dot?
> e.g.: should this be able to be handled by any software that implements
> spf:
> v=spf1 a:domain.com. ~all
>
> Postfix for example has no problems with an domain name with trailing dot
> but I have found a software "mdeamon" which cannot perform a dns lookup
> if the domain name is a FQDN (with trailing dot). I wrote the developers
> but they say, they think it's not a bug in their software because "all of
> the pages about SPF, don't talk about domains with trailing dot" and the
> RFC does not make it explicit if a FQDN is acceptable.

Postfix is being liberal in what it accepts.  It should already be
treating names in SPF records as absolute (like all names in DNS
records).

Appending periods is a local convention to prevent suffixes being
appended be they search lists or current origin in master files (
which doesn't apply the the contents of TXT (SPF) records).

Mark

> I hope you can clarify.
>
> Kind regards,
> --
> Tobias Perschon
> Bitconnect EDV/IT Dienstleistungen & Handel e.U.
> --
> https://www.bitconnect.at
> tp@bitconnect.at<mailto:tp@bitconnect.at>
> +43 (0) 699 10 86 75 17
> --
> This e-mail may contain confidential and/or privileged information. If
> you are not
> the intended recipient (or have received this e-mail in error) please
> notify the sender
> and destroy this e-mail. Any unauthorised copying, disclosure or
> distribution of the
> material in this e-mail is strictly forbidden.
>
>

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org