NAME
spfd - simple forking daemon to provide SPF query services
VVEERRSSIIOONN
2006-02-07
SYNOPSIS
ssppffdd --ppoorrtt port [--sseett-uusseerr uid|username] [--sseett-ggrroouupp gid|groupname]
ssppffdd --ssoocckkeett filename [--ssoocckkeett-uusseerr uid|username] [--ssoocckkeett-ggrroouupp
gid|groupname] [--ssoocckkeett-ppeerrmmss octal-perms] [--sseett-uusseerr uid|username]
[--sseett-ggrroouupp gid|groupname]
ssppffdd --hheellpp
DESCRIPTION
ssppffdd is a simple forking Sender Policy Framework (SPF) query proxy
server. spfd receives and answers SPF query requests on a TCP/IP or
UNIX domain socket.
The --ppoorrtt form listens on a TCP/IP socket on the specified port. The
default port is 55997700.
The --ssoocckkeett form listens on a UNIX domain socket that is created with
the specified filename. The socket can be assigned specific user and
group ownership with the --ssoocckkeett-uusseerr and --ssoocckkeett-ggrroouupp options, and
specific filesystem permissions with the --ssoocckkeett-ppeerrmmss option.
Generally, spfd can be instructed with the --sseett-uusseerr and --sseett-ggrroouupp
options to drop root privileges and change to another user and group
before it starts listening for requests.
The --hheellpp form prints usage information for ssppffdd.
RREEQQUUEESSTT
A request consists of a series of lines delimited by \x0A (LF)
characters (or whatever your system considers a newline). Each line
must be of the form key==value, where the following keys are required:
iipp The sender IP address.
sseennddeerr
The envelope sender address (from the SMTP "MAIL FROM" command).
hheelloo
The envelope sender hostname (from the SMTP "HELO" command).
RREESSPPOONNSSEE
spfd responds to query requests with similar series of lines of the
form key==value. The most important response keys are:
rreessuulltt
The result of the SPF query:
pass The specified IP address is an authorized mailer for the
sender domain/address.
fail The specified IP address is not an authorized mailer for
the sender domain/address.
softfail The specified IP address is not an authorized mailer for
the sender domain/address, however the domain is still in
the process of transitioning to SPF.
neutral The sender domain makes no assertion about the status of
the IP address.
unknown The sender domain has a syntax error in its SPF record.
error A temporary DNS error occurred while resolving the sender
policy. Try again later.
none There is no SPF record for the sender domain.
ssmmttppccoommmmeenntt
The text that should be included in the receiver's SMTP response.
hheeaaddeerrccoommmmeenntt
The text that should be included as a comment in the message's
"Received-SPF:" header.
ssppffrreeccoorrdd
The SPF record of the envelope sender domain.
For the description of other response keys see Mail::SPF::Query.
For more information on SPF see .
EEXXAAMMPPLLEE
A running spfd could be tested using the "netcat" utility like this:
$ echo -e "ip=11.22.33.44\nsender=user@pobox.com\nhelo=spammer.example.net\n" | nc localhost 5970
result=neutral
smtpcomment=Please see http://spf.pobox.com/why.html?sender=user%40pobox.com&ip=11.22.33.44&receiver=localhost
headercomment=localhost: 11.22.33.44 is neither permitted nor denied by domain of user@pobox.com
guess=neutral
smtpguess=
headerguess=
guesstf=neutral
smtptf=
headertf=
spfrecord=v=spf1 ?all
SEE ALSO
Mail::SPF::Query,
AUTHORS This version of ssppffdd was written by Meng Weng Wong
. Improved argument parsing was added by
Julian Mehnle .
This man-page was written by Julian Mehnle .
perl v5.8.8 2006-02-06 SPFD(1)