Facebook
Twitter
danami
Silver Pleskian
Username:
TITLE
Plesk 18.0.53 breaks SPF checks rejecting external email
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE
# plesk version
Product version: Plesk Obsidian 18.0.53.1
OS version: CentOS 7.9.2009 x86_64
Build date: 2023/06/13 09:00
Revision: 3988a02704d3a3a48ed93ab21c8de546d1a69d77
PROBLEM DESCRIPTION
After updating to Plesk 18.0.53 or 18.0.53.1 external email gets rejected with a SPF validation defer status if "Reject mail when SPF resolves to "fail" is enabled. The only workaround to get mail working again is to disable SPF checks by setting SPF checking mode to "only create Received headers never block".
1. I've verified that DNS is functioning properly on the machine.
2. I'm seeing this across multiple servers after updating.
3. Restarting the Plesk milter (pc-remote) doesn't fix the issue.
STEPS TO REPRODUCE
1. Set SPF checking mode - Reject mail when SPF resolves to "fail" (deny) under Tools and Settings -> Mail Server Settings.
2. Try to get an external email.
ACTUAL RESULT
Sample logs:
EXPECTED RESULT
SPF checking should work.
ANY ADDITIONAL INFORMATION
(DID NOT ANSWER QUESTION)
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM
Confirm bug
TITLE
Plesk 18.0.53 breaks SPF checks rejecting external email
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE
# plesk version
Product version: Plesk Obsidian 18.0.53.1
OS version: CentOS 7.9.2009 x86_64
Build date: 2023/06/13 09:00
Revision: 3988a02704d3a3a48ed93ab21c8de546d1a69d77
PROBLEM DESCRIPTION
After updating to Plesk 18.0.53 or 18.0.53.1 external email gets rejected with a SPF validation defer status if "Reject mail when SPF resolves to "fail" is enabled. The only workaround to get mail working again is to disable SPF checks by setting SPF checking mode to "only create Received headers never block".
1. I've verified that DNS is functioning properly on the machine.
2. I'm seeing this across multiple servers after updating.
3. Restarting the Plesk milter (pc-remote) doesn't fix the issue.
STEPS TO REPRODUCE
1. Set SPF checking mode - Reject mail when SPF resolves to "fail" (deny) under Tools and Settings -> Mail Server Settings.
2. Try to get an external email.
ACTUAL RESULT
Sample logs:
Code:
2023-06-13 11:45:20 AM spf Error code: (26) DNS lookup failure
2023-06-13 11:45:20 AM psa-pc-remote spf: stderr: DATA REPLY:451:4.7.24 SPF validation defer.
2023-06-13 11:45:20 AM psa-pc-remote spf: stderr: DEFER
2023-06-13 11:45:20 AM postfix/cleanup milter-reject: END-OF-MESSAGE from mail-yqbcan01on2095.outbound.protection.outlook.com[40.107.116.95]: 4.7.24 SPF validation defer.; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<CAN01-YQB-obe.outbound.protection.outlook.com>EXPECTED RESULT
SPF checking should work.
ANY ADDITIONAL INFORMATION
(DID NOT ANSWER QUESTION)
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM
Confirm bug
