Applicable to:
- Plesk Onyx for Linux
Symptoms
- Custom notification for SPF-Check is set under Plesk > Tools & Settings > Mail Settings > SPF Spam protection > SPF explanation text.
- Notification is ignored if a message fails on SPF check.
- The following error can be found in
/var/log/maillog:
CONFIG_TEXT: example.com postfix/smtp[16325]: 9CD60300D6C8C: to=<john.doe@example.com>, relay=mail.example.com [http://203.0.113.2]:25, delay=4.9, delays=0.4/0.05/4.1/0.4, dsn=5.7.1, status=bounced (host mail.example.com[http://203.0.113.2] said: 550 5.7.1 Command rejected (in reply to end of DATA command))
Cause
Product issue:
- #PPPM-10087 "Logs now display the customized SPF explanation text instead of the default “5.7.1 Command rejected” error."
Fixed in:- Plesk Obsidian 12 March 2019 (fixed as PPP-40884, Linux)
Resolution
Please consider updating your server:
Workaround
As a workaround, if update is not possible for some reason, try the following
temporary solution
Currently no workaround is available.
Comments
9 comments
Could you please release a quick fix? The plan "to be fixed in one of the future updates" sounds like underrating the importance of
proper SPF filter handling, which is nowadays a vital asset in even the most modest hosting service level that involves mail.
It seems that a custom notification in combination with a reject mode, ignores any SPF check completely.
With this combo all mail that should have been rejected is accepted instead and missing any spf related headers..
Without the custom SPF explanation text the SPF reject on fail works, but with the above mentioned 550 5.7.1 status.
(CentOS Linux 7.4.1708 / Plesk 17.8.11 Update #49)
Hello @Arjan,
Thank you for the feedback.
The issue was already fixed for the future major release. It should be already available in Plesk 17.9 preview version (not for production usage).
The backport to Plesk 17.8 is also planned. However, there is no exact ETA for now, stay tuned for this article updates.
Hello,
We (HaiSoft) just tried the fix in Plesk Obsidian 18.0.18: While it kind of works in the sense that it now generates a proper SPF error, the custom SPF message has its "spaces" replaced by "%" signs, which makes it unreadable. We tried ecaping the spaces with "\" or using "%20" instead of spaces, which doesn't help solving this.
So this is on the right way but not totally fixed :p
Best regards
Please post the default values for this spf setup
@Robin Labadie Could you specify the OS version so I could pass this on to the developers?
@Robert The 'SPF explanation text' line is empty by default.
@Leonid Gukhman
# cat /etc/centos-release
CentOS Linux release 7.7.1908 (Core)
I remain available if any more information is required. I would love to see this issue fixed. :)
Best regards
@Robin Labadie Since the bug is considered fixed, we would like to investigate this particular case. Let's continue it in the ticket that has been created (you should have received the notification).
Thanks @Leonid Gukhman
Following up into the ticket once we got a fresh install able to reproduce the issue then :)
Best regards
Please sign in to leave a comment.