#1106197 postfix-policyd-spf-python: SPF policy not reported for sender domains with trailing dot

Package:
postfix-policyd-spf-python
Source:
postfix-policyd-spf-python
Submitter:
Filippo Giunchedi
Date:
2025-05-21 00:48:02 UTC
Severity:
normal
#1106197#5
Date:
2025-05-21 00:45:34 UTC
From:
To:
Dear Maintainer,
policyd-spf reports no SPF for sender domains with trailing dot, even though
the name is valid in DNS.

Example reproducer:

$ policyd-spf
request=smtpd_access_policy
protocol_state=RCPT
protocol_state=SMTP
helo_name=debian.org
queue_id=12345FF
instance=1234.5678
sender=test@test.org.
recipient=debian@debian.org
client_address=8.8.8.8

action=prepend Received-SPF: None (mailfrom) identity=mailfrom;
client-ip=8.8.8.8; helo=debian.org; envelope-from=test@test.org.;
receiver=debian.org

Here SPF is reported as None, even though the result should be softfail
instead with no trailing dot:

request=smtpd_access_policy
protocol_state=RCPT
protocol_state=SMTP
helo_name=debian.org
queue_id=12345FF
instance=1234.5678
sender=test@test.org
recipient=debian@debian.org
client_address=8.8.8.8

action=prepend Received-SPF: Softfail (mailfrom) identity=mailfrom;
client-ip=8.8.8.8; helo=debian.org; envelope-from=test@test.org;
receiver=debian.org