Always treat DNS timeouts as temporary fail for SPF

diff --git a/src/libserver/spf.c b/src/libserver/spf.c
index e9c805d6e8c60a31e1d9eee77d388980cf59bf8b..cef96e0b80efd023ff185d6e1a26e7329923ed31 100644 (file)
--- a/src/libserver/spf.c
+++ b/src/libserver/spf.c
@@ -703,8 +703,9 @@ spf_record_dns_callback (struct rdns_reply *reply, gpointer arg)
                                break;
                }
        }
-       else if (cb->cur_action == SPF_RESOLVE_INCLUDE ||
-                       cb->cur_action == SPF_RESOLVE_REDIRECT) {
+       else if ((cb->cur_action == SPF_RESOLVE_INCLUDE ||
+                       cb->cur_action == SPF_RESOLVE_REDIRECT) ||
+                       reply->code == RDNS_RC_TIMEOUT) {
                cb->addr->flags |= RSPAMD_SPF_FLAG_TEMPFAIL;
                msg_info_spf (
                                "<%s>: spf error for domain %s: cannot resolve DNS record for"