[Pymilter] Unknown mechanism found

[Arnaud de Prelle]

Dear list members,

I'm using the pymilter since a few months without any trouble.

Today, my server is refusing emails coming from SFR (@sfr.fr) because their SPF record triggers a "permanent Error":

33840 Jan 10 18:41:17 icecube spfmilter: [27508] hello from smtp25.services.sfr.fr
33841 Jan 10 18:41:18 icecube sm-mta[6885]: STARTTLS=server, relay=smtp25.services.sfr.fr [93.17.128.118], version=TLSv1/SSLv3, verify=NOT, cipher=DHE-RSA-AES256-SHA, bits=256/256
33842 Jan 10 18:41:18 icecube spfmilter: [27508] hello from smtp25.services.sfr.fr
33843 Jan 10 18:41:18 icecube spfmilter: [27508] mail from <xxHIDDENxx at sfr.fr> ('SIZE=25822', 'BODY=8BITMIME')
33844 Jan 10 18:41:18 icecube spfmilter: [27508] REJECT: SPF permerror 550 SPF Permanent Error: Unknown mechanism found
33845 Jan 10 18:41:18 icecube sm-mta[6885]: t0AHfHNM006885: Milter: from=<xxHIDDENxx at sfr.fr>, reject=550-5.5.2 SPF Permanent Error: Unknown mechanism found\r\n550-5.5.2 There is a fatal syntax error in the SPF record for sfr.fr\r\n550 5.5.2 We cannot accept mail from sfr.fr until this is corrected.
33846 Jan 10 18:41:18 icecube sm-mta[6885]: t0AHfHNM006885: from=<xxHIDDENxx at sfr.fr>, size=25822, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=MTA-v4, relay=smtp25.services.sfr.fr [93.17.128.118]

SPF Record: "v=spf1 ip4:93.17.128.0/24 ip4:160.92.187.254 ip4:160.92.187.251 ip4:160.92.187.226 include:spf.mandrillapp.com ?all "

I did check their records against two SPF validators but I'm not sure whether their record is correct or not.
One reports that the record is not correct :
http://www.kitterman.com/spf/validate.html
Results - PermError SPF Permanent Error: Unknown mechanism found

Another one says it's all OK :
http://mxtoolbox.com/domain/sfr.fr/?source=findmonitors

At first sight this record looks correct except that it contains a trailing space at the end of the record.
Is this against the RFC ?

Specifications of my setup :

root at icecube:~# uname -a
Linux icecube.pnzone.net 3.16-3-amd64 #1 SMP Debian 3.16.5-1 (2014-10-10) x86_64 GNU/Linux

root at icecube:~# cat /etc/issue.net
Debian GNU/Linux 8

root at icecube:~# dpkg -l | grep spf-milter-python
ii  spf-milter-python                     0.8.18-2                          all          RFC 4408 compliant SPF Milter for Sendmail and Postfix

root at icecube:~# dpkg -l | grep ii\ \ python\ 
ii  python                                2.7.8-2                           amd64        interactive high-level object-oriented language (default version)

root at icecube:~# dpkg -l | grep sendmail\ \ 
ii  sendmail                              8.14.4-8                          all          powerful, efficient, and scalable Mail Transport Agent (metapackage)

root at icecube:~# grep -v '#' /etc/spf-milter-python/spfmilter.cfg | grep -v "^;" | grep -v "^$"
[milter]
socketname = /var/run/spf-milter-python/spfmiltersock
name = pyspffilter
internal_connect = 127.0.0.1,192.168.0.0/16,10.0.0.0/8
untrapped_exception = CONTINUE
[spf]
access_file = /etc/mail/access.db

root at icecube:~# grep spf /etc/mail/sendmail.mc 
INPUT_MAIL_FILTER(`spfmilter',`S=local:/var/run/spf-milter-python/spfmiltersock, T=S:8m;R:8m')

Best Regards,
Arnaud.