SPF failures nuke fedora-extras* msgs from redhat.com

[Paul Wouters]

[ sorry if slightly off-topic ]

Hey people,

I wondered why I was not receiving any fedora-extras messages for a week.
So after tweaking my procmail rules, I found it all email was deleted
as spam, because it scores "SPFFAIL".

# host -t txt redhat.com
redhat.com descriptive text "v=spf1 include:spf-2.redhat.com include:spf-1.redhat.com -all"
# host -t any spf-1.redhat.com
spf-1.redhat.com descriptive text "v=spf1 ip4:204.16.104.38 ip4:66.187.233.31 ip4:66.187.237.31 ip4:66.187.233.32"
# host -t any spf-2.redhat.com
spf-2.redhat.com descriptive text "v=spf1 mx ip4:204.14.234.13 ip4:204.14.232.13 ip4:204.14.234.14 ip4:204.14.232.14
ip4:209.132.177.0/24 ip4:65.125.54.185 ip4:65.125.54.186 ip4:65.125.54.187 ip4:65.125.54.188 ip4:65.125.54.189
ip4:65.125.54.190 ip4:219.120.63.242 ip4:66.187.224.200"

Mail arrives from:

  Received: from hormel.redhat.com (hormel.redhat.com [209.132.177.30])

Now hormel is indeed listed for spf-2, so I am not sure what is going on.

This comes from enabling loadplugin Mail::SpamAssassin::Plugin::SPF with spamassassin-3.1.3-5

A re-ordering of procmail rules worked around this issue for me.

Paul