james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Norman Maurer (JIRA)" <server-...@james.apache.org>
Subject [jira] Commented: (JSPF-21) SPF1Data.MAX_DEPTH = 10 not enough
Date Sun, 16 Jul 2006 18:30:16 GMT
    [ http://issues.apache.org/jira/browse/JSPF-21?page=comments#action_12421463 ] 
            
Norman Maurer commented on JSPF-21:
-----------------------------------

>From spf-devel:

Norman Maurer wrote:
> we developed a java implementation for spf called jSPF. Version 0.9b1
> wil be released next week if nothing goes wrong.. Now someone open a bug
> report which report us that microsoft.com return a permError cause the
> maximum includes of 10 is to less.. But i think the bugreport is invalid
> cause the specs are really clear on this..

You are absolutely correct, the microsoft.com records are invalid -- hard 
to believe but true.  And I think it is important that implementations and 
their users NOT begin to weaken their lookup limits, because otherwise 
more and more domains will begin to ignore the lookup limits, in turn 
again causing other implementations to have to raise, or entirely get rid 
of, their limits.

The limits are a necessary evil that serve the purpose of mitigating the 
risks of DoS attacks.


> SPF1Data.MAX_DEPTH = 10 not enough
> ----------------------------------
>
>                 Key: JSPF-21
>                 URL: http://issues.apache.org/jira/browse/JSPF-21
>             Project: jSPF
>          Issue Type: Bug
>          Components: Core
>            Reporter: Miguel Di Ciurcio Filho
>         Assigned To: Norman Maurer
>            Priority: Blocker
>
> Using the default MAX_DEPTH = 10 in SPF1Data can not finish the probe for a decision.
> Try with microsoft.com, it will fail :-P 
> Microsoft's domain have alot of includes.
> Well, I rised it to 15 and now works fine.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Mime
View raw message