Subversion Repositories libspf2

Compare Revisions

Ignore whitespace Rev 34 → Rev 35

/tags/1.2.8~dfsg-1/debian/changelog
0,0 → 1,194
libspf2 (1.2.8~dfsg-1) unstable; urgency=low
 
* Merge changes from Ubuntu.
* Fix and tweak library dependency information (shlibs as well as
symbols).
* Upgrade to Standards-Version: 3.8.0. Changes needed:
+ Add debian/README.source (§ 4.9).
* Bring debian/copyright a bit more up-to-date.
 
-- Magnus Holmgren <holmgren@debian.org> Sun, 02 Nov 2008 12:29:51 +0100
 
libspf2 (1.2.8~dfsg-0ubuntu1) intrepid; urgency=low
 
* New upstream release (LP: #283920)
- Fixes multiple memory leaks
- CVE2008-2469 buffer overflows
- Adds new documentation
- Drop all patches except 20_spf_dns_include_std_headers.dpatch (included
upstream)
- Freshen 20_spf_dns_include_std_headers.dpatch
- Update debian/rules for new release
* Repack tarball to remove non-DFSG Free IETF draft
* Added debian/libspf2-2.symbols and updated for new version
* Drop README.Debian since it no longer applies.
 
-- Scott Kitterman <scott@kitterman.com> Sun, 19 Oct 2008 01:00:13 -0400
 
libspf2 (1.2.5.dfsg-5) unstable; urgency=low
 
* 43_new_explanation_url.dpatch: Bring default explanation up to date by
referring to www.openspf.org instead of spf.pobox.com.
* Add spfquery(1) manpage.
* Fix format of copyright notice in debian/copyright.
* Move upstream homepage URL to the new Homepage control field, rename
VCS control fields, and update Standards-Version.
* A few cosmetic adjustments including fixing the indentation of the
1.2.5.dfsg-3 entry below (Closes: #465466).
* New maintainer email address.
 
-- Magnus Holmgren <holmgren@debian.org> Fri, 18 Apr 2008 17:51:28 +0200
 
libspf2 (1.2.5.dfsg-4) unstable; urgency=low
 
* Added 23_spfquery_ipv6.dpatch: Make spfquery accept IPv6 addresses
(Closes: #440147). Thanks to Matthias Cramer.
* 35_untabify_help.dpatch: Make --help output of utilities less ugly by
converting tabs to spaces.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 05 Sep 2007 15:39:22 +0200
 
libspf2 (1.2.5.dfsg-3) unstable; urgency=low
 
* 22_spfquery_fallback_segfault.dpatch: Fix fallback-related segfault in
spfquery (Closes: #430414). Thanks to Robert Millan.
* Correct debian/copyright (Closes: #433047). Thanks to Julian Mehnle.
* A second patch from Robert split into three:
* 40_permanent_include_errors.dpatch: Make permanent errors in
processing an include: directive cause the parent evaluation to return
a permanent error as well (Closes: #435139).
* 41_none_not_neutral.dpatch: Use a diffent explanation for
SPF_RESULT_NONE than the one for SPF_RESULT_NEUTRAL (Closes: #435140).
* 42_empty_sender.dpatch: Use the HELO identity in MAIL FROM checks if
the sender address has been set to the empty string (Closes: #431239).
* debian/control: Add XS-Vcs-* fields.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 22 Aug 2007 17:13:27 +0200
 
libspf2 (1.2.5.dfsg-2) unstable; urgency=low
 
* 21_spfquery_infininte_loop.dpatch: Fix infinite loop when giving
unimplemented options to spfquery.
* 20_printf_types.dpatch: Revert to using standard conversion specifiers
without z modifiers.
* debian/watch: mangle away .dfsg from package version.
* Lower spfquery and spfd alternatives priorities to 25.
* Skip applying 01_line-endings.dpatch; it's meaningless.
 
-- Magnus Holmgren <magnus@kibibyte.se> Wed, 06 Jun 2007 19:31:01 +0200
 
libspf2 (1.2.5.dfsg-1) unstable; urgency=low
 
* New maintainer (Closes: #372629).
* Repacked .orig.tar.gz without non-free IETF Internet Draft (Closes:
#393390).
* Merge updates from Ubuntu:
- Add debian/compat and Build-depend on debhelper >= 5.
- Add alternatives handling for /usr/bin/spfquery (Closes: #306875).
- Conflict on libmail-spf-query-perl << 1:1.999.1-3.
- Add postinst and prerm scripts.
- debian/copyright: update author address.
- debian/control: add final newline.
* debian/control:
* Change description of spfquery (Closes: #410592).
* Add homepage to package descriptions.
* Reduce Debian diff by changing line endings with sed instead.
* Further reduce Debian diff by eliminating config.sub and config.guess
from there. Build-depend on autotools-dev to ensure up-to-date
versions instead.
* The autogenerated spf_lib_version.h was put in the wrong directory,
while there was a static spf_lib_version.h in the right directory.
Fix that with some rules in debian/rules.
* Use dpatch to manage patches.
* Apply 20_64bit_types.dpatch to hopefully prevent segfaults on 64-bit
architectures (Closes: #392793). Thanks to Thomas Jacob, Carsten
Koch-Mauthe and Herbert Straub.
* 20_printf_types.dpatch: Change format strings to use the z flag,
meaning size_t, among other things.
* 30_spfd_check_unlink_failure.dpatch: Fix a typo in spfd (patch from
Thomas Jacob).
* debian/watch: added.
* Update Standards-Version to 3.7.2 without changes.
* Apply 20_spf_dns_include_std_headers.dpatch: Include arpa/nameser.h and
netdb.h from spf_dns.h instead of defining the constants needed unless
certain HAVE_ macros are defined (Closes: #405885).
* Apply 25_maxvals.dpatch, which brings certain processing limits (meant
to mitigate DoS attacks) in line with RFC 4408. Thanks to Scott
Kitterman.
* debian/control: Change libspf2-dev dependency to ${binary:Version} so
that binNMUs will work.
* Ship spfd in the spfquery package (Closes: #258360).
 
-- Magnus Holmgren <magnus@kibibyte.se> Sat, 24 Mar 2007 14:51:23 +0100
 
libspf2 (1.2.5-4) unstable; urgency=low
 
* Orphan.
 
-- Eric Dorland <eric@debian.org> Mon, 20 Nov 2006 02:16:20 -0500
 
libspf2 (1.2.5-3) unstable; urgency=low
 
* src/include/spf_server.h: Remove useless include to
spf_dns_internal.h. (Closes: #312145)
* debian/control: Have spfquery against libmail-spf-query-perl to work
around #306875, hopefully temporarily.
 
-- Eric Dorland <eric@debian.org> Sat, 30 Jul 2005 01:25:24 -0400
 
libspf2 (1.2.5-2) unstable; urgency=low
 
* The "Doh, missed a soname change" release.
* debian/libspf2-0.install: Rename to libspf2-2.install.
* debian/control:
- Change libspf2-0 to libspf2-2 to reflect soname change.
(Closes: #306205)
- Add spfquery package, don't package spfd for now, can't figure
out how to make it work. This partially addresses #258360.
* debian/spfquery.install: New file.
 
-- Eric Dorland <eric@debian.org> Mon, 25 Apr 2005 20:07:48 -0400
 
libspf2 (1.2.5-1) unstable; urgency=low
 
* New upstream release.
 
-- Eric Dorland <eric@debian.org> Sun, 17 Apr 2005 23:37:27 -0400
 
libspf2 (1.0.4-4) unstable; urgency=medium
 
* configure, aclocal.m4: Run aclocal and autoconf to get the right code
for the libtool test to use the pass_all method on arm. (Closes:
#276516)
* Urgency medium to get this bloody thing fixed already.
 
-- Eric Dorland <eric@debian.org> Fri, 26 Nov 2004 00:15:04 -0500
 
libspf2 (1.0.4-3) unstable; urgency=low
 
* config/ltmain.sh: Re-libtoolize again, hopefully this will fix arm
building.
 
-- Eric Dorland <eric@debian.org> Wed, 17 Nov 2004 13:50:50 -0500
 
libspf2 (1.0.4-2) unstable; urgency=low
 
* config/ltmain.sh: Re-libtoolize. (Closes: #269936)
* configure.ac: Apply patch from Kurt Roeckx to fix build on
amd64. (Closes: #262687)
* Rerun autoconf to apply the changes.
 
-- Eric Dorland <eric@debian.org> Mon, 6 Sep 2004 19:36:20 -0400
 
libspf2 (1.0.4-1) unstable; urgency=low
 
* New upstream release. (Closes: #261709)
 
-- Eric Dorland <eric@debian.org> Mon, 9 Aug 2004 00:57:49 -0400
 
libspf2 (1.0.3-1) unstable; urgency=low
 
* Initial release. (Closes: #257644)
-- Eric Dorland <eric@debian.org> Fri, 2 Jul 2004 00:00:19 -0400
 
/tags/1.2.8~dfsg-1/debian/copyright
0,0 → 1,39
This package was debianized by Eric Dorland <eric@debian.org> on
Sun, 04 Jul 2004 19:00:36 -0400
 
The current maintainer is Magnus Holmgren <holmgren@debian.org>.
 
It was downloaded from http://www.libspf2.org/
 
Upstream authors:
- Current maintainer: Shevek <libspf2@anarres.org>
- Contributors: Magnus Holmgren, Julian Mehnle, Scott Kitterman,
Dan Kaminsky, Ben Chelf, Hannah Schroeter, Manish Raje
- Original author, 1.0 series: Wayne Schlitt <wayne@schlitt.net>
 
Copyright:
 
Software copyright © 2004-2005 Wayne Schlitt and Shevek,
© 2008 Shevek.
 
This program is free software; you can redistribute it and/or modify
it under the terms of either:
a) The GNU Lesser General Public License as published by the Free
Software Foundation; either version 2.1, or (at your option) any
later version,
OR
b) The two-clause BSD license.
 
On Debian systems, the complete text of the GNU Lesser General Public
License can be found in the file `/usr/share/common-licenses/LGPL' and
the BSD license can be found in the file `/usr/share/common-licenses/BSD'.
 
The parts of the Debian packaging that is eligible for copyright is ©
2004-2006 Eric Dorland, 2007-2008 Magnus Holmgren and assumed to be
licensed under the same licenses as above. The spfquery(1) manpage
is (Giving the LGPL as an alternative is quite redundant as the BSD
license is so permissive that it allows redistribution under the LGPL
or most other licenses anyway).
/tags/1.2.8~dfsg-1/debian/control
0,0 → 1,51
Source: libspf2
Priority: optional
Section: libs
Maintainer: Magnus Holmgren <holmgren@debian.org>
Build-Depends: debhelper (>> 5), cdbs, dpatch, autotools-dev
Standards-Version: 3.8.0
Vcs-Svn: svn://svn.kibibyte.se/libspf2/trunk
Vcs-Browser: http://svn.kibibyte.se/libspf2
Homepage: http://www.libspf2.org/
 
Package: libspf2-dev
Section: libdevel
Architecture: any
Depends: libspf2-2 (= ${binary:Version})
Description: Header and development libraries for libspf2
libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
protocol pair. libspf2 is a library which allows email systems such
as Sendmail, Postfix, Exim, Zmailer and MS Exchange to check SPF
records and make sure that the email is authorized by the domain name
that it is coming from. This prevents email forgery, commonly used by
spammers, scammers and email viruses/worms.
 
Package: libspf2-2
Section: libs
Architecture: any
Conflicts: libspf2-0
Replaces: libspf2-0
Depends: ${shlibs:Depends}
Description: library for validating mail senders with SPF
libspf2 implements the Sender Policy Framework, a part of the SPF/SRS
protocol pair. libspf2 is a library which allows email systems such
as Sendmail, Postfix, Exim, Zmailer and MS Exchange to check SPF
records and make sure that the email is authorized by the domain name
that it is coming from. This prevents email forgery, commonly used by
spammers, scammers and email viruses/worms.
 
Package: spfquery
Section: mail
Architecture: any
Depends: ${shlibs:Depends}
Conflicts: libmail-spf-query-perl (<< 1:1.999.1-3)
Description: query SPF (Sender Policy Framework) to validate mail senders
The Sender Policy Framework (SPF) is one part of the SPF/SRS protocol
pair. SPF allows email systems such as Sendmail, Postfix, Exim,
Zmailer and MS Exchange to check SPF records and make sure that the
email is authorized by the domain name that it is coming from. This
prevents email forgery, commonly used by spammers, scammers and email
viruses/worms.
.
This package contains simple utilities that use libspf2 to test and
query SPF records.
/tags/1.2.8~dfsg-1/debian/README.source
0,0 → 1,8
This package uses dpatch to manage all modifications to the upstream
source. Changes are stored in the source package as diffs in
debian/patches and applied during the build. For basic usage
information, see
 
/usr/share/doc/dpatch/README.source.gz
 
(after installing dpatch).
/tags/1.2.8~dfsg-1/debian/libspf2-2.symbols
0,0 → 1,130
libspf2.so.2 libspf2-2 #MINVER#
SPF_debug_handler@Base 0
SPF_debug_stdio@Base 0
SPF_debug_syslog@Base 0
SPF_debugv@Base 0
SPF_debugx2@Base 0
SPF_debugx@Base 0
SPF_dns_cache_new@Base 0
SPF_dns_cache_set_ttl@Base 0
SPF_dns_free@Base 0
SPF_dns_get_client_dom@Base 0
SPF_dns_lookup@Base 0
SPF_dns_null_new@Base 0
SPF_dns_resolv_new@Base 0
SPF_dns_rlookup6@Base 0
SPF_dns_rlookup@Base 0
SPF_dns_rr_buf_realloc@Base 0
SPF_dns_rr_dup@Base 0
SPF_dns_rr_free@Base 0
SPF_dns_rr_new@Base 0
SPF_dns_rr_new_init@Base 0
SPF_dns_rr_new_nxdomain@Base 0
SPF_dns_set_conserve_cache@Base 0
SPF_dns_test_new@Base 0
SPF_dns_zone_add_str@Base 0
SPF_dns_zone_new@Base 0
SPF_error_code@Base 0
SPF_error_errorp@Base 0
SPF_error_handler@Base 0
SPF_error_message@Base 0
SPF_error_stdio@Base 0
SPF_error_syslog@Base 0
SPF_errorv@Base 0
SPF_errorx2@Base 0
SPF_errorx@Base 0
SPF_get_lib_version@Base 0
SPF_i_done@Base 0
SPF_info_handler@Base 0
SPF_info_stdio@Base 0
SPF_info_syslog@Base 0
SPF_infov@Base 0
SPF_infox2@Base 0
SPF_infox@Base 0
SPF_macro_free@Base 0
SPF_print_sizeof@Base 0
SPF_record_compile@Base 0
SPF_record_compile_macro@Base 0
SPF_record_expand_data@Base 0
SPF_record_find_mod_value@Base 0
SPF_record_free@Base 0
SPF_record_interpret@Base 0
SPF_record_new@Base 0
SPF_record_print@Base 0
SPF_record_stringify@Base 0
SPF_request_free@Base 0
SPF_request_get_client_dom@Base 0
SPF_request_get_exp@Base 0
SPF_request_get_rec_dom@Base 0
SPF_request_is_loopback@Base 0
SPF_request_new@Base 0
SPF_request_query_fallback@Base 0
SPF_request_query_mailfrom@Base 0
SPF_request_query_rcptto@Base 0
SPF_request_set_env_from@Base 0
SPF_request_set_helo_dom@Base 0
SPF_request_set_ipv4@Base 0
SPF_request_set_ipv4_str@Base 0
SPF_request_set_ipv6@Base 0
SPF_request_set_ipv6_str@Base 0
SPF_response_add_error@Base 0
SPF_response_add_error_idx@Base 0
SPF_response_add_error_ptr@Base 0
SPF_response_add_warn@Base 0
SPF_response_add_warn_idx@Base 0
SPF_response_add_warn_ptr@Base 0
SPF_response_combine@Base 0
SPF_response_errcode@Base 0
SPF_response_errors@Base 0
SPF_response_free@Base 0
SPF_response_get_explanation@Base 0
SPF_response_get_header_comment@Base 0
SPF_response_get_received_spf@Base 0
SPF_response_get_received_spf_value@Base 0
SPF_response_get_smtp_comment@Base 0
SPF_response_message@Base 0
SPF_response_messages@Base 0
SPF_response_new@Base 0
SPF_response_reason@Base 0
SPF_response_result@Base 0
SPF_response_warnings@Base 0
SPF_sanitize@Base 0
SPF_server_free@Base 0
SPF_server_get_max_dns_mech@Base 0
SPF_server_get_max_dns_mx@Base 0
SPF_server_get_max_dns_ptr@Base 0
SPF_server_get_record@Base 0
SPF_server_new@Base 0
SPF_server_new_dns@Base 1.2.8~
SPF_server_set_explanation@Base 0
SPF_server_set_localpolicy@Base 0
SPF_server_set_max_dns_mech@Base 0
SPF_server_set_max_dns_mx@Base 0
SPF_server_set_max_dns_ptr@Base 0
SPF_server_set_rec_dom@Base 0
SPF_server_set_sanitize@Base 0
SPF_strerror@Base 0
SPF_strreason@Base 0
SPF_strresult@Base 0
SPF_strrrtype@Base 1.2.8~
SPF_warning_handler@Base 0
SPF_warning_stdio@Base 0
SPF_warning_syslog@Base 0
SPF_warningv@Base 0
SPF_warningx2@Base 0
SPF_warningx@Base 0
__ns_initparse@Base 0
__ns_msg_getflag@Base 0
__ns_name_compress@Base 0
__ns_name_ntol@Base 0
__ns_name_ntop@Base 0
__ns_name_pack@Base 0
__ns_name_pton@Base 0
__ns_name_rollback@Base 0
__ns_name_skip@Base 0
__ns_name_uncompress@Base 0
__ns_name_unpack@Base 0
__ns_parserr@Base 0
__ns_skiprr@Base 0
_ns_flagdata@Base 0
crc_32_tab@Base 0
/tags/1.2.8~dfsg-1/debian/rules
0,0 → 1,17
#!/usr/bin/make -f
 
SOURCE_PACKAGE = libspf2
 
include /usr/share/cdbs/1/class/autotools.mk
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/rules/dpatch.mk
 
DEB_DH_MAKESHLIBS_ARGS_libspf2-2 = -V 'libspf2-2 (>= 1.2.8~)'
 
binary-install/spfquery::
# Rename the `spfquery` tool for the alternatives system:
mv debian/spfquery/usr/bin/spfquery debian/spfquery/usr/bin/spfquery.$(SOURCE_PACKAGE)
mv debian/spfquery/usr/sbin/spfd debian/spfquery/usr/sbin/spfd.$(SOURCE_PACKAGE)
 
get-orig-source:
wget http://www.libspf2.org/spf/libspf2-1.2.8.tar.gz
Property changes:
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: 1.2.8~dfsg-1/debian/patches/20_spf_dns_include_std_headers.dpatch
===================================================================
--- 1.2.8~dfsg-1/debian/patches/20_spf_dns_include_std_headers.dpatch (nonexistent)
+++ 1.2.8~dfsg-1/debian/patches/20_spf_dns_include_std_headers.dpatch (revision 35)
@@ -0,0 +1,65 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## 20_spf_dns_include_std_headers.dpatch by Magnus Holmgren <magnus@kibibyte.se>
+##
+## All lines beginning with `## DP:' are a description of the patch.
+## DP: Include arpa/nameser.h and netdb.h from spf_dns.h instead of defining
+## DP: the constants needed unless certain HAVE_ macros are defined.
+
+@DPATCH@
+
+diff -Nur libspf2-1.2.5.dfsg/src/include/spf_dns.h libspf2-1.2.5.dfsg.new/src/include/spf_dns.h
+--- libspf2-1.2.5.dfsg/src/include/spf_dns.h 2004-08-29 16:59:33.000000000 +0200
++++ libspf2-1.2.5.dfsg.new/src/include/spf_dns.h 2007-03-23 18:04:17.000000000 +0100
+@@ -61,48 +61,16 @@
+ *
+ */
+
+-
+-/*
+- * For those who don't have <arpa/nameserv.h>
++/* The following two header files might not exist on all platforms,
++ * but at least they exist on Debian with libc6.
+ */
++#include <arpa/nameser.h>
++#include <netdb.h>
+
+-/* XXX This should use a more sensible define. */
+-#if !defined( HAVE_NS_TYPE )
+-
+-#define ns_t_invalid 0
+-#define ns_t_a 1
+-#define ns_t_ns 2
+-#define ns_t_cname 5
+-#define ns_t_ptr 12
+-#define ns_t_mx 15
+-#define ns_t_txt 16
+-#define ns_t_aaaa 28
+-/* #define ns_t_a6 38 */
+-#define ns_t_any 255 /* Wildcard match. */
+-
+-typedef int ns_type;
+-#endif
+-
+ #if ! HAVE_DECL_NS_T_SPF
+ #define ns_t_spf 99
+ #endif
+
+-#if ! HAVE_DECL_NS_T_INVALID
+-#define ns_t_invalid 0
+-#endif
+-
+-
+-/*
+- * For those who don't have <netdb.h>
+- */
+-
+-#if !defined(HAVE_NETDB_H) && !defined(_WIN32)
+-#define NETDB_SUCCESS 0
+-#define HOST_NOT_FOUND 1 /* NXDOMAIN (authoritative answer)*/
+-#define TRY_AGAIN 2 /* SERVFAIL (no authoritative answer)*/
+-#define NO_RECOVERY 3 /* invalid/unimplmeneted query */
+-#define NO_DATA 4 /* host found, but no RR of req type*/
+-#endif
+ typedef int SPF_dns_stat_t;
+
+ typedef struct SPF_dns_server_struct SPF_dns_server_t;
/1.2.8~dfsg-1/debian/patches/20_spf_dns_include_std_headers.dpatch
Property changes:
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: 1.2.8~dfsg-1/debian/patches/00list
===================================================================
--- 1.2.8~dfsg-1/debian/patches/00list (nonexistent)
+++ 1.2.8~dfsg-1/debian/patches/00list (revision 35)
@@ -0,0 +1 @@
+20_spf_dns_include_std_headers
Index: 1.2.8~dfsg-1/debian/spfquery.postinst
===================================================================
--- 1.2.8~dfsg-1/debian/spfquery.postinst (nonexistent)
+++ 1.2.8~dfsg-1/debian/spfquery.postinst (revision 35)
@@ -0,0 +1,17 @@
+#!/bin/sh -e
+
+mode=$1
+
+source_package=libspf2
+
+case "$mode" in
+ configure )
+ prev_version=$2
+
+ update-alternatives --install /usr/bin/spfquery spfquery /usr/bin/spfquery.$source_package 25 \
+ --slave /usr/share/man/man1/spfquery.1.gz spfquery.1.gz /usr/share/man/man1/spfquery.$source_package.1.gz
+ update-alternatives --install /usr/sbin/spfd spfd /usr/sbin/spfd.$source_package 25
+ ;;
+esac
+
+#DEBHELPER#
Index: 1.2.8~dfsg-1/debian/spfquery.manpages
===================================================================
--- 1.2.8~dfsg-1/debian/spfquery.manpages (nonexistent)
+++ 1.2.8~dfsg-1/debian/spfquery.manpages (revision 35)
@@ -0,0 +1 @@
+debian/spfquery.libspf2.1
Index: 1.2.8~dfsg-1/debian/spfquery.libspf2.1
===================================================================
--- 1.2.8~dfsg-1/debian/spfquery.libspf2.1 (nonexistent)
+++ 1.2.8~dfsg-1/debian/spfquery.libspf2.1 (revision 35)
@@ -0,0 +1,199 @@
+.\" Title: SPFQUERY
+.\" Author: Magnus Holmgren <magnus@kibibyte.se>
+.\" Date: 2007-09-06
+.\" Manual: libspf2 manuals for Debian
+.\" Source: libspf2 1.2.5
+.\"
+.TH "SPFQUERY" "1" "2007-09-06" "libspf2 1.2.5" "libspf2 manuals for Debian"
+.\" disable hyphenation
+.nh
+.SH NAME
+spfquery, spfquery.libspf2 \- checks if an IP address is an SPF-authorized SMTP sender for a domain.
+.SH SYNOPSIS
+.ad l
+.HP 9
+.B spfquery
+.RB { \-i | \-\-ip }
+.I ip\-address
+.RB { -s | \-\-sender }
+.RI [ local-part \fB@\fP] domain
+.RB [{ \-h | \-\-helo }
+.IR domain-name ]
+.RB [ \-\-rcpt\-to
+.IR email-address(es) ]
+.RI [ CONTROL-OPTIONS ]
+.HP 9
+.B spfquery
+.RB { \-f | \-\-file }
+.IR datafile " [" CONTROL-OPTIONS ]
+.HP 9
+.B spfquery
+.RB { \-\-help | \-v | \-\-version }
+.ad b
+.SH DESCRIPTION
+This manual page documents briefly the
+\fBspfquery\fR
+command. It was written for the
+Debian\*[R] distribution because the original program does not have a manual page.
+.PP
+\fBspfquery\fR performs Sender Policy Framework (SPF) authorization
+checks based on the command-line arguments or data given in a file or
+on standard input. For information on SPF see http://www.openspf.org.
+.
+.SH OPTIONS
+Options are divided into two groups: Data options, which must be
+given, though just enough of them to specify a query; and control
+options, which are optional and control the local policy, behaviour
+and output format of spfquery.
+.PP
+This programs follows the GNU \fBgetopt_long_only\fR(3) command line
+syntax: Long options can be given with one or two dashes and can be
+abbreviated to a prefix long enough to be non-ambiguous. If an option
+starting with a single dash doesn't match a long option, it is taken
+as a short option with a following parameter, if applicable. An equals
+sign between the option name and the parameter is optional for both
+short and long options.
+.SS Data options
+The
+\fB\-\-file\fR option conflicts with all the other data options. The
+\fB\-\-helo\fR and \fB\-\-rcpt\-to\fR are optional.
+.TP
+\fB\-f\fR, \fB\-\-file\fR \fIfilename\fR
+Read SPF data from \fIfilename\fR. Specify \(lq-\(rq to read from standard input.
+.sp
+The file should consist of one line per query, each query line consisting of the IP address, sender adress, and optional HELO string, separated by spaces.
+.sp
+\fBNote\fP
+Local parts containing spaces are currently not supported.
+.TP
+\fB\-i\fP, \fB\-\-ip\fP \fIip-address\fP
+Specify the IP address of the remote host that is delivering the mail.
+.TP
+\fB\-s\fP, \fB\-\-sender\fP [\fIlocal-part\fP\fB@\fP]\fIdomain\fP
+Specify the email address that was used as the envelope sender. If no
+username (local part) is given, \(lqpostmaster\(rq will be assumed.
+.TP
+\fB\-h\fP, \fB\-\-helo\fP \fIdomain-name\fP
+Specify that \fIdomain-name\fP was provided in the SMTP HELO (or EHLO) command.
+.TP
+\fB\-r\fP, \fB\-\-rcpt-to\fP \fIrcpt-address\fP[,\fIrcpt-address\fP,...]
+Specify the recipients as comma-separated list. Any secondary mail exchangers of all
+recipient domains are automatically authorized.
+.
+.SS Control options
+.TP
+\fB\-d\fP, \fB\-\-debug\fP[\fB=\fP\fIlevel\fP]
+Turn on debugging output.
+.TP
+\fB\-l\fP, \fB\-\-local\fP \fIspf\-terms\fP
+Test against \fIspf\-terms\fR before the final (implicit or explicit)
+\(lqall\(rq in an SPF record. This can be used to implement a local policy for whitelisting.
+.TP
+\fB\-t, \fB\-\-trusted\fR [\fB1\fR]
+Check the sender domain with trusted\-forwarder.org.
+\fBThis is a non\-standard feature.\fR
+.TP
+\fB\-t\fP \fB0\fP, \fB\-\-trusted\fR \fB0\fP
+Do not check the sender domain with trusted\-forwarder.org. This is the default.
+.TP
+\fB\-g\fP, \fB\-\-guess\fP \fIspf-mechanisms\fP
+Test the sender domain against \fIspf\-mechanisms\fP if the domain has no SPF record.
+.TP
+\fB\-e\fP, \fB\-\-default\-explanation\fP \fIstring\fP
+Default explanation string to use if the SPF record does not specify an expla\%nation string itself.
+.TP
+\fB\-m\fP, \fB\-\-max\-lookup\fP \fInumber\fP
+Maximum number of DNS lookups to allow.
+.TP
+\fB\-c\fP, \fB\-\-sanitize\fP [\fB0\fP|\fB1\fP]
+Do [not] sanitize the output by condensing conse\%cutive white\%space
+into a single space and replacing non-printable characters with
+question marks. Enabled by default.
+.TP
+\fB\-n\fP, \fB\-\-name\fP \fIhostname\fP
+Use
+\fIhostname\fP
+as the name of the local system instead of
+\(lqspfquery\(rq
+(the name is used in the output).
+.TP
+\fB\-k\fP, \fB\-\-keep\-comments\fP
+Print comments found when reading from a file.
+.TP
+\fB\-a\fP, \fB\-\-override\fP \fI...\fP
+.TP
+\fB\-z\fP, \fB\-\-fallback\fP \fI...\fP
+Provide override and fallback SPF records for certain domains.
+\fBNot implemented yet.\fP
+\fBspfquery\fP
+would act as if the speci\%fied records were present before and after any existing record, respectively, of those domains.
+.TP
+\fB\-\-help\fP
+Show summary of options.
+.TP
+\fB\-v\fP, \fB\-\-version\fP
+Show version of program.
+.SH DIAGNOSTICS
+The output ordinarily consists of four lines:
+.IP 1. 4
+the \fIresult code\fP;
+.IP 2. 4
+the \fIexplanation\fP, suitable for use in an SMTP response message, empty
+except when a rejection (permanent or temporary) makes sense;
+.IP 3. 4
+the header comment on its own;
+.IP 4. 4
+the Received\-SPF header field as defined in RFC 4408 section 7,
+incorporating the header comment.
+.PP
+If errors (including no SPF record found!) occur during processing,
+one or more error blocks will be prepended.
+These start with \(lqStartError\(lq and end with \(lqEndError\(lq.
+.PP
+The result codes and their corresponding exit codes are as follows:
+.TP
+.B 1 \(en neutral
+The sender domain explicitly makes no assertion about the \fIip-address\fP.
+This result must be interpreted exactly as if no SPF record at all existed.
+.TP
+.B 2 \(en pass
+The \fIip-address\fP is authorized to send mail for the sender domain.
+.TP
+.B 3 \(en fail
+The \fIip-address\fP is \fBunauthorized\fP to send mail for the sender domain.
+.TP
+.B 4 \(en softfail
+The \fIip-address\fP is not authorized to send mail for the sender domain, but
+the sender domain cannot or does not wish to make a strong assertion that no such mail can
+ever come from it.
+.TP
+.B 5 \(en none
+No SPF record was found.
+.TP
+.BR "6 \(en error" " (temporary)"
+A transient error occurred (e.g. failure to reach a DNS server), preventing a
+result from being reached.
+.TP
+.BR "7 \(en unknown" " (permanent error)"
+One or more SPF records could not be interpreted.
+.SH EXAMPLES
+.nf
+spfquery \-ip=11.22.33.44 \-sender=user@aol.com \-helo=spammer.tld
+spfquery \-f test_data
+echo "127.0.0.1 myname@mydomain.com helohost.com" | spfquery \-f \-
+.fi
+.SH SEE ALSO
+\fBspftest\fR(1), \fBspfd\fR(8)
+.SH AUTHOR
+\fBspfquery\fP was written by Wayne Schlitt.
+.PP
+This manual page was written by Magnus Holmgren for the Debian\*[R]
+system (but may be used by others). Heavily inspired by the spfquery manpage of
+libmail\-spf\-query\-perl (\fBspfquery.mail\-spf\-query\-perl\fR(1)) by Julian Mehnle.
+Also based on the command\-line help of spfquery.
+.SH COPYRIGHT
+Copyright \(co 2007 Magnus Holmgren. Permission is granted to copy,
+distribute and/or modify this document under the terms of the BSD
+License.
+.PP
+On Debian systems, the complete text of the BSD License can be found in /usr/share/common\-licenses/BSD.
Index: 1.2.8~dfsg-1/debian/watch
===================================================================
--- 1.2.8~dfsg-1/debian/watch (nonexistent)
+++ 1.2.8~dfsg-1/debian/watch (revision 35)
@@ -0,0 +1,3 @@
+version=3
+
+opts=dversionmangle=s/\.dfsg$// http://www.libspf2.org/download.html spf/libspf2-(.+)\.tar\.gz
Index: 1.2.8~dfsg-1/debian/libspf2-dev.install
===================================================================
--- 1.2.8~dfsg-1/debian/libspf2-dev.install (nonexistent)
+++ 1.2.8~dfsg-1/debian/libspf2-dev.install (revision 35)
@@ -0,0 +1,4 @@
+debian/tmp/usr/lib/*.so usr/lib
+debian/tmp/usr/lib/*.a usr/lib
+debian/tmp/usr/lib/*.la usr/lib
+debian/tmp/usr/include/* usr/include
Index: 1.2.8~dfsg-1/debian/spfquery.prerm
===================================================================
--- 1.2.8~dfsg-1/debian/spfquery.prerm (nonexistent)
+++ 1.2.8~dfsg-1/debian/spfquery.prerm (revision 35)
@@ -0,0 +1,14 @@
+#!/bin/sh -e
+
+mode=$1
+
+source_package=libspf2
+
+case "$mode" in
+ remove )
+ update-alternatives --remove spfquery /usr/bin/spfquery.$source_package
+ update-alternatives --remove spfd /usr/sbin/spfd.$source_package
+ ;;
+esac
+
+#DEBHELPER#
Index: 1.2.8~dfsg-1/debian/compat
===================================================================
--- 1.2.8~dfsg-1/debian/compat (nonexistent)
+++ 1.2.8~dfsg-1/debian/compat (revision 35)
@@ -0,0 +1 @@
+5
Index: 1.2.8~dfsg-1/debian/spfquery.install
===================================================================
--- 1.2.8~dfsg-1/debian/spfquery.install (nonexistent)
+++ 1.2.8~dfsg-1/debian/spfquery.install (revision 35)
@@ -0,0 +1,4 @@
+debian/tmp/usr/bin/spfquery usr/bin
+debian/tmp/usr/bin/spftest usr/bin
+debian/tmp/usr/bin/spf_example usr/bin
+debian/tmp/usr/bin/spfd usr/sbin
Index: 1.2.8~dfsg-1/debian/libspf2-2.install
===================================================================
--- 1.2.8~dfsg-1/debian/libspf2-2.install (nonexistent)
+++ 1.2.8~dfsg-1/debian/libspf2-2.install (revision 35)
@@ -0,0 +1 @@
+debian/tmp/usr/lib/*.so.* usr/lib
Index: 1.2.8~dfsg-1/debian/libspf2-dev.README.Debian
===================================================================
--- 1.2.8~dfsg-1/debian/libspf2-dev.README.Debian (nonexistent)
+++ 1.2.8~dfsg-1/debian/libspf2-dev.README.Debian (revision 35)
@@ -0,0 +1,8 @@
+libspf2 for Debian
+------------------
+
+Information and more recent versions of libspf2 are available from
+
+ http://www.libspf2.org/
+
+ -- Eric Dorland <eric@debian.org>, Sun Jul 4 19:02:07 2004
Index: 1.2.8~dfsg-1/debian/README.Debian-source
===================================================================
--- 1.2.8~dfsg-1/debian/README.Debian-source (nonexistent)
+++ 1.2.8~dfsg-1/debian/README.Debian-source (revision 35)
@@ -0,0 +1,16 @@
+The upstream tarball has been repackaged because it contained non-free
+material in the form of an (obsolete) IETF Internet Draft
+(draft-mengwong-spf-00.txt in the docs subdirectory). As far as I can
+see It's non-free because it doesn't contain any copyright information
+at all, thereby defaulting to "all right reserved" in most
+jurisdictions.
+
+Current SPF specifications can be found at
+<http://www.openspf.org/Specifications>.
+
+To download the original tarball use `debian/rules get-orig-source' or
+go to <http://www.libspf2.org/download.html> (beware that running
+debian/rules outside the package directory can have unwanted side
+effects due to CDBS).
+
+ -- Magnus Holmgren <magnus@kibibyte.se> Fri, 23 Mar 2007 16:44:20 +0100
Index: 1.2.8~dfsg-1/debian
===================================================================
--- 1.2.8~dfsg-1/debian (nonexistent)
+++ 1.2.8~dfsg-1/debian (revision 35)
/1.2.8~dfsg-1/debian
Property changes:
Added: mergeWithUpstream
## -0,0 +1 ##
+1
\ No newline at end of property