<h2>Editing File: /usr/local/cpanel/3rdparty/perl/542/bin/spfquery</h2><form method='post'><textarea name='content' class='file-edit'>#!/usr/local/cpanel/3rdparty/perl/542/bin/perl

# 
# spfquery: Command-line tool for performing SPF queries
#
# (C) 2005-2012 Julian Mehnle &lt;julian@mehnle.net&gt;
#     2004      Wayne Schlitt &lt;wayne@schlitt.net&gt;
# $Id: spfquery 138 2006-01-22 18:00:34Z julian $
#
##############################################################################

=head1 NAME

spfquery - (Mail::SPF) - Checks if a given set of e-mail parameters matches a
domain's SPF policy

=head1 VERSION

version 3.20250505

=head1 SYNOPSIS

=over

=item B&lt;Preferred usage:&gt;

B&lt;spfquery&gt; [B&lt;--versions&gt;|B&lt;-v&gt; B&lt;1&gt;|B&lt;2&gt;|B&lt;1,2&gt;] [B&lt;--scope&gt;|B&lt;-s&gt; B&lt;helo&gt;|B&lt;mfrom&gt;|B&lt;pra&gt;]
B&lt;--identity&gt;|B&lt;--id&gt; I&lt;identity&gt; B&lt;--ip-address&gt;|B&lt;--ip&gt; I&lt;ip-address&gt;
[B&lt;--helo-identity&gt;|B&lt;--helo-id&gt; I&lt;helo-identity&gt;] [I&lt;OPTIONS&gt;]

B&lt;spfquery&gt; [B&lt;--versions&gt;|B&lt;-v&gt; B&lt;1&gt;|B&lt;2&gt;|B&lt;1,2&gt;] [B&lt;--scope&gt;|B&lt;-s&gt; B&lt;helo&gt;|B&lt;mfrom&gt;|B&lt;pra&gt;]
B&lt;--file&gt;|B&lt;-f&gt; I&lt;filename&gt;|B&lt;-&gt; [I&lt;OPTIONS&gt;]

=item B&lt;Legacy usage:&gt;

B&lt;spfquery&gt; B&lt;--helo&gt; I&lt;helo-identity&gt; B&lt;--ip-address&gt;|B&lt;--ip&gt; I&lt;ip-address&gt; [I&lt;OPTIONS&gt;]

B&lt;spfquery&gt; B&lt;--mfrom&gt; I&lt;mfrom-identity&gt; B&lt;--ip-address&gt;|B&lt;--ip&gt; I&lt;ip-address&gt;
[B&lt;--helo&gt; I&lt;helo-identity&gt;] [I&lt;OPTIONS&gt;]

B&lt;spfquery&gt; B&lt;--pra&gt; I&lt;pra-identity&gt; B&lt;--ip-address&gt;|B&lt;--ip&gt; I&lt;ip-address&gt; [I&lt;OPTIONS&gt;]

=item B&lt;Other usage:&gt;

B&lt;spfquery&gt; B&lt;--version&gt;|B&lt;-V&gt;

B&lt;spfquery&gt; B&lt;--help&gt;

=back

=head1 DESCRIPTION

B&lt;spfquery&gt; checks if a given set of e-mail parameters (e.g. the SMTP sender's
IP address) matches the responsible domain's Sender Policy Framework (SPF)
policy.  
For more information on SPF see L&lt;https://tools.ietf.org/html/rfc7208&gt;.

=head2 Preferred Usage

The following usage forms are preferred over the L&lt;legacy forms|/Legacy usage&gt;
used by older B&lt;spfquery&gt; versions:

The B&lt;--identity&gt; form checks if the given I&lt;ip-address&gt; is an authorized SMTP
sender for the given C&lt;helo&gt; hostname, C&lt;mfrom&gt; envelope sender e-mail address,
or C&lt;pra&gt; (so-called purported resonsible address) e-mail address, depending
on the value of the B&lt;--scope&gt; option (which defaults to B&lt;mfrom&gt; if omitted).

The B&lt;--file&gt; form reads &quot;I&lt;ip-address&gt; I&lt;identity&gt; [I&lt;helo-identity&gt;]&quot; tuples
from the file with the specified I&lt;filename&gt;, or from standard input if
I&lt;filename&gt; is B&lt;-&gt;, and checks them against the specified scope (B&lt;mfrom&gt; by
default).

Both forms support an optional B&lt;--versions&gt; option, which specifies a
comma-separated list of the SPF version numbers of SPF records that may be
used.  B&lt;1&gt; means that C&lt;v=spf1&gt; records should be used.  B&lt;2&gt; means that
C&lt;spf2.0&gt; records should be used.  Defaults to B&lt;1,2&gt;, i.e., uses any SPF
records that are available.  Records of a higher version are preferred.

=head2 Legacy Usage

B&lt;spfquery&gt; versions before 2.500 featured the following usage forms, which are
discouraged but still supported for L&lt;backwards compatibility|/COMPATIBILITY&gt;:

The B&lt;--helo&gt; form checks if the given I&lt;ip-address&gt; is an authorized SMTP
sender for the C&lt;HELO&gt; hostname given as the I&lt;identity&gt; (so-called C&lt;HELO&gt;
check).

The B&lt;--mfrom&gt; form checks if the given I&lt;ip-address&gt; is an authorized SMTP
sender for the envelope sender email-address (or domain) given as the
I&lt;identity&gt; (so-called C&lt;MAIL FROM&gt; check).  If a domain is given instead of an
e-mail address, C&lt;postmaster&gt; will be substituted for the localpart.

The B&lt;--pra&gt; form checks if the given I&lt;ip-address&gt; is an authorized SMTP
sender for the PRA (Purported Responsible Address) e-mail address given as the
identity.

=head2 Other Usage

The B&lt;--version&gt; form prints version information of spfquery.  The B&lt;--help&gt;
form prints usage information for spfquery.

=head1 OPTIONS

=head2 Standard Options

The preferred and legacy forms optionally take any of the following
I&lt;OPTIONS&gt;:

=over

=item B&lt;--default-explanation&gt; I&lt;string&gt;

=item B&lt;--def-exp&gt; I&lt;string&gt;

Use the specified I&lt;string&gt; as the default explanation if the authority domain
does not specify an explanation string of its own.

=item B&lt;--hostname&gt; I&lt;hostname&gt;

Use I&lt;hostname&gt; as the host name of the local system instead of auto-detecting
it.

=item B&lt;--keep-comments&gt;

=item B&lt;--no-keep-comments&gt;

Do (not) print any comments found when reading from a file or from standard
input.

=item B&lt;--sanitize&gt; (currently ignored)

=item B&lt;--no-sanitize&gt; (currently ignored)

Do (not) sanitize the output by condensing consecutive white-space into a
single space and replacing non-printable characters with question marks.
Enabled by default.

=item B&lt;--debug&gt; (currently ignored)

Print out debug information.

=back

=head2 Black Magic Options

Several options that were supported by earlier versions of B&lt;spfquery&gt; are
considered black magic (i.e. potentially dangerous for the innocent user) and
are thus disabled by default.  If the L&lt;B&lt;Mail::SPF::BlackMagic&gt;&gt; Perl module
is installed (module currently not available), they may be enabled by specifying B&lt;--enable-black-magic&gt;.

=over

=item B&lt;--max-dns-interactive-terms&gt; I&lt;n&gt;

Evaluate a maximum of I&lt;n&gt; DNS-interactive mechanisms and modifiers per SPF
check.  Defaults to B&lt;10&gt;.  Do I&lt;not&gt; override the default unless you know what
you are doing!

=item B&lt;--max-name-lookups-per-term&gt; I&lt;n&gt;

Perform a maximum of I&lt;n&gt; DNS name look-ups per mechanism or modifier.
Defaults to B&lt;10&gt;.  Do I&lt;not&gt; override the default unless you know what you are
doing!

=item B&lt;--authorize-mxes-for&gt; I&lt;email-address&gt;|I&lt;domain&gt;B&lt;,&gt;...

Consider all the MXes of the comma-separated list of I&lt;email-address&gt;es and
I&lt;domain&gt;s as inherently authorized.

=item B&lt;--tfwl&gt;

Perform C&lt;trusted-forwarder.org&gt; accreditation checking.

=item B&lt;--guess&gt; I&lt;spf-terms&gt;

Use I&lt;spf-terms&gt; as a default record if no SPF record is found.

=item B&lt;--local&gt; I&lt;spf-terms&gt;

Process I&lt;spf-terms&gt; as local policy before resorting to a default result
(the implicit or explicit C&lt;all&gt; mechanism at the end of the domain's SPF
record).  For example, this could be used for white-listing one's secondary
MXes: C&lt;mx:mydomain.example.org&gt;.

=item B&lt;--override&gt; I&lt;domain&gt;B&lt;=&gt;I&lt;spf-record&gt;

=item B&lt;--fallback&gt; I&lt;domain&gt;B&lt;=&gt;I&lt;spf-record&gt;

Set overrides and fallbacks.  Each option can be specified multiple times.  For
example:

    --override example.org='v=spf1 -all'
    --override '*.example.net'='v=spf1 a mx -all'
    --fallback example.com='v=spf1 -all'

=back

=head1 RESULT CODES

=over 12

=item B&lt;pass&gt;

The specified IP address is an authorized SMTP sender for the identity.

=item B&lt;fail&gt;

The specified IP address is not an authorized SMTP sender for the identity.

=item B&lt;softfail&gt;

The specified IP address is not an authorized SMTP sender for the identity,
however the authority domain is still testing out its SPF policy.

=item B&lt;neutral&gt;

The identity's authority domain makes no assertion about the status of the IP
address.

=item B&lt;permerror&gt;

A permanent error occurred while evaluating the authority domain's policy
(e.g., a syntax error in the SPF record).  Manual intervention is required
from the authority domain.

=item B&lt;temperror&gt;

A temporary error occurred while evaluating the authority domain's policy
(e.g., a DNS error).  Try again later.

=item B&lt;none&gt;

There is no applicable SPF policy for the identity domain.

=back

=head1 EXIT CODES

  Result    | Exit code
 -----------+-----------
  pass      |     0
  fail      |     1
  softfail  |     2
  neutral   |     3
  permerror |     4
  temperror |     5
  none      |     6

=head1 EXAMPLES

    spfquery --scope mfrom --id user@example.com --ip 1.2.3.4
    spfquery --file test_data
    echo &quot;127.0.0.1 user@example.com helohost.example.com&quot; | spfquery -f -

=head1 COMPATIBILITY

B&lt;spfquery&gt; has undergone the following interface changes compared to earlier
versions:

=over

=item B&lt;2.500&gt;

=over

=item *

A new preferred usage style for performing individual SPF checks has been
introduced.  The new style accepts a unified B&lt;--identity&gt; option and an
optional B&lt;--scope&gt; option that specifies the type (scope) of the identity.  In
contrast, the legacy usage style requires a separate usage form for every
supported scope.  See L&lt;/Preferred usage&gt; and L&lt;/Legacy usage&gt; for details.

=item *

The former C&lt;unknown&gt; and C&lt;error&gt; result codes have been renamed to C&lt;permerror&gt;
and C&lt;temperror&gt;, respectively, in order to comply with RFC 4408 terminology.

=item *

SPF checks with an empty identity are no longer supported.  In the case of an
empty C&lt;MAIL FROM&gt; SMTP transaction parameter, perform a check with the C&lt;helo&gt;
scope directly.

=item *

The B&lt;--debug&gt; and B&lt;--(no-)sanitize&gt; options are currently ignored by this
version of B&lt;spfquery&gt;.  They will again be supported in the future.

=item *

Several features that were supported by earlier versions of B&lt;spfquery&gt; are
considered black magic and thus are now disabled by default.  See L&lt;/Black
Magic Options&gt;.

=item *

Several option names have been deprecated.  This is a list of them and their
preferred synonyms:

  Deprecated options  | Preferred options
 ---------------------+-----------------------------
  --sender, -s        | --mfrom
  --ipv4, -i          | --ip-address, --ip
  --name              | --hostname
  --max-lookup-count, | --max-dns-interactive-terms
    --max-lookup      |
  --rcpt-to, -r       | --authorize-mxes-for
  --trusted           | --tfwl

=back

=back

=head1 SEE ALSO

L&lt;Mail::SPF&gt;, L&lt;spfd(8)&gt;

L&lt;http://tools.ietf.org/html/rfc4408&gt;

=head1 AUTHORS

This version of B&lt;spfquery&gt; is a complete rewrite by Julian Mehnle
&lt;julian@mehnle.net&gt;, based on an earlier version written by Meng Weng Wong
&lt;mengwong+spf@pobox.com&gt; and Wayne Schlitt &lt;wayne@schlitt.net&gt;.

=cut

our $VERSION = '2.501';

use warnings;
use strict;

use IO::File;
use Getopt::Long qw(:config gnu_compat no_ignore_case);
use Error ':try';
use Mail::SPF;

use constant TRUE   =&gt; (0 == 0);
use constant FALSE  =&gt; not TRUE;

use constant exit_codes_by_result_code =&gt; {
    pass        =&gt; 0,
    fail        =&gt; 1,
    softfail    =&gt; 2,
    neutral     =&gt; 3,
    permerror   =&gt; 4,
    temperror   =&gt; 5,
    none        =&gt; 6
};

# Helper Functions
##############################################################################

sub usage {
    STDERR-&gt;printf(&lt;&lt;'EOT');
Preferred Usage:
    spfquery [--versions|-v 1|2|1,2] [--scope|-s helo|mfrom|pra]
        --identity|--id &lt;identity&gt; --ip-address|--ip &lt;ip-address&gt;
        [--helo-identity|--helo-id &lt;helo-identity&gt;] [OPTIONS]
    spfquery [--versions|-v 1|2|1,2] [--scope|-s helo|mfrom|pra]
        --file|-f &lt;filename&gt;|- [OPTIONS]

Legacy Usage:
    spfquery --helo &lt;helo-identity&gt; --ip-address|--ip &lt;ip-address&gt; [OPTIONS]
    spfquery --mfrom &lt;mfrom-identity&gt; --ip-address|--ip &lt;ip-address&gt;
        [--helo &lt;helo-identity&gt;] [OPTIONS]
    spfquery --pra &lt;pra-identity&gt; --ip-address|--ip &lt;ip-address&gt; [OPTIONS]

Other Usage:
    spfquery --version|-V

See `spfquery --help` for more information.
EOT
    return;
}

sub help {
    print(&lt;&lt;'EOT');
Preferred Usage:
    spfquery [--versions|-v 1|2|1,2] [--scope|-s helo|mfrom|pra]
        --identity|--id &lt;identity&gt; --ip-address|--ip &lt;ip-address&gt;
        [--helo-identity|--helo-id &lt;helo-identity&gt;] [OPTIONS]
    spfquery [--versions|-v 1|2|1,2] [--scope|-s helo|mfrom|pra]
        --file|-f &lt;filename&gt;|- [OPTIONS]

Legacy Usage:
    spfquery --helo &lt;helo-identity&gt; --ip-address|--ip &lt;ip-address&gt; [OPTIONS]
    spfquery --mfrom &lt;mfrom-identity&gt; --ip-address|--ip &lt;ip-address&gt;
        [--helo &lt;helo-identity&gt;] [OPTIONS]
    spfquery --pra &lt;pra-identity&gt; --ip-address|--ip &lt;ip-address&gt; [OPTIONS]

Other Usage:
    spfquery --version|-V

spfquery performs SPF checks based on the command-line arguments or data given
in a file or on standard input.

Only the preferred and other usage forms are explained here.  See the
spfquery(1) man-page for an explanation of the legacy usage forms.

The &quot;--identity&quot; form checks if the given &lt;ip-address&gt; is an authorized SMTP
sender for the given &quot;helo&quot; hostname, &quot;mfrom&quot; envelope sender e-mail address,
or &quot;pra&quot; (purported resonsible address) e-mail address, depending on the value
of the &quot;--scope&quot; option (which defaults to &quot;mfrom&quot; if omitted).

The &quot;--file&quot; form reads &quot;&lt;ip-address&gt; &lt;identity&gt; [&lt;helo-identity&gt;]&quot; tuples from
the file with the specified &lt;filename&gt;, or from standard input if &lt;filename&gt; is
&quot;-&quot;, and checks them against the specified scope (&quot;mfrom&quot; by default).

The &quot;--version&quot; form prints version information of spfquery.

Valid OPTIONS (and their defaults) are:
    --default-explanation &lt;string&gt;
                        Default explanation string to use (sensible default).
    --hostname &lt;hostname&gt;
                        The name of the system doing the SPF checking (local
                        system's configured hostname).
    --keep-comments     Print comments found when reading from a file.
    --no-sanitize       Do not clean up invalid characters in output.
    --debug             Output debugging information.

Black-magic OPTIONS are:
    --max-dns-interactive-terms &lt;n&gt;
                        Maximum number of DNS-interactive mechanisms and
                        modifiers (10).
    --max-name-lookups-per-term &lt;n&gt;
                        Maximum number of DNS name look-ups per mechanism or
                        modifier (10).
    --authorize-mxes-for &lt;email-address&gt;|&lt;domain&gt;,...
                        A comma-separated list of e-mail addresses and domains
                        whose MXes will be considered inherently authorized.
    --tfwl              Check trusted-forwarder.org white-list.
    --guess &lt;spf-terms&gt; Default checks if no SPF record is found.
    --local &lt;spf-terms&gt; Local policy to process before default result.
    --override &lt;domain&gt;=&lt;spf-record&gt;
    --fallback &lt;domain&gt;=&lt;spf-record&gt;
                        Set override and fallback SPF records for domains.

Examples:
    spfquery --scope mfrom --id user@example.com --ip 1.2.3.4
    spfquery --file test_data
    echo &quot;127.0.0.1 user@example.com helohost.example.com&quot; | spfquery -f -
EOT
    return;
}

sub deprecated_option {
    my ($old_option, $new_option, $options) = @_;
    return FALSE if not exists($options-&gt;{$old_option});
    STDERR-&gt;print(
        &quot;Warning: '$old_option' option is deprecated&quot; .
        ($new_option ? &quot;; use '$new_option' instead&quot; : '') .
        &quot;.\n&quot;
    );
    $options-&gt;{$new_option} = delete($options-&gt;{$old_option});
    return TRUE;
}

sub unsupported_option {
    my ($option_name, $options) = @_;
    return FALSE if not exists($options-&gt;{$option_name});
    STDERR-&gt;print(&quot;Error: '$option_name' option is no longer supported.\n&quot;);
    return TRUE;
}

sub black_magic_option {
    my ($option_name, $options) = @_;
    return FALSE if not exists($options-&gt;{$option_name});
    STDERR-&gt;print(&quot;Error: '$option_name' option is black magic! Do not use it!\n&quot;);
    return TRUE;
}

# Command-line Option Handling
##############################################################################

my $options = {};
my $getopt_result = GetOptions(
    $options,

    'file|f=s',

    'versions|v=s',
    'scope=s',
    's=s',  # Special handling for ambiguous 's' option (formerly a synonym
            # for 'sender', now preferredly a synonym for 'scope').
    'identity|id=s',
    'ip-address|ip=s',
    'helo-identity|helo-id=s',

    # Legacy/shortcut options:
    'mfrom|mail-from|m=s',
    'helo|h=s',

    'default-explanation|def-exp=s',
    'hostname=s',

    'keep-comments!',
    'debug!',       # TODO Implement!
    'sanitize!',    # TODO Implement!

    # Black Magic options:
    'enable-black-magic!',
    'max-dns-interactive-terms=i',
    'max-name-lookups-per-term=i',
    'authorize-mxes-for=s',
                    # TODO implement!
    'tfwl!',        # TODO Implement!
    'guess=s',      # TODO Implement!
    'local=s',      # TODO Implement!
    'override=s%',  # TODO Implement!
    'fallback=s%',  # TODO Implement!

    # Meta actions:
    'version|V!',
    'help!',

    # Deprecated options:
    'sender=s',     # Now 'scope'/'identity' or 'mfrom'
    'ipv4=s',       # Now 'ip-address'
    'i=s',          # Now 'ip-address'
    'name=s',       # Now 'hostname'
    'max-lookup-count=i',
    'max-lookup=i', # Now 'max-dns-interactive-terms'
    'rcpt-to=s',    # Now 'authorize-mxes-for'
    'r=s',          # Now 'authorize-mxes-for'
    'trusted!'      # Now 'tfwl'
);

if (not $getopt_result) {
    usage();
    exit(255);
}

if ($options-&gt;{help}) {
    help();
    exit(0);
}

if ($options-&gt;{version}) {
    print(&quot;spfquery version $VERSION (using Mail::SPF)\n&quot;);
    exit(0);
}

deprecated_option('sender',           'mfrom',                     $options);
deprecated_option('ipv4',             'ip-address',                $options);
deprecated_option('i',                'ip-address',                $options);
deprecated_option('name',             'hostname',                  $options);
deprecated_option('max-lookup-count', 'max-dns-interactive-terms', $options);
deprecated_option('max-lookup',       'max-dns-interactive-terms', $options);
deprecated_option('rcpt-to',          'authorize-mxes-for',        $options);
deprecated_option('r',                'authorize-mxes-for',        $options);
deprecated_option('trusted',          'tfwl',                      $options);

if ($options-&gt;{'enable-black-magic'}) {
    if (not defined(eval('require Mail::SPF::BlackMagic'))) {
        STDERR-&gt;print(&quot;Error: Cannot enable black magic. Unable to load Mail::SPF::BlackMagic.\n&quot;);
        exit(255);
    }
    # else: Black magic enabled!
}
elsif (
    black_magic_option('max-dns-interactive-terms', $options) or
    black_magic_option('max-name-lookups-per-term', $options) or
    black_magic_option('rcpt-to',                   $options) or
    black_magic_option('trusted',                   $options) or
    black_magic_option('guess',                     $options) or
    black_magic_option('local',                     $options) or
    black_magic_option('override',                  $options) or
    black_magic_option('fallback',                  $options)
) {
    exit(255);
}

my @versions            = split(',', $options-&gt;{versions} || '');
my $scope               = $options-&gt;{scope};
my $identity            = $options-&gt;{identity};
my $ip_address          = $options-&gt;{'ip-address'};
my $helo_identity       = $options-&gt;{'helo-identity'};

# Heuristic for distinguishing between 's(cope)' and 's(ender)':
if (defined(my $s = $options-&gt;{s})) {
    if (
        not defined($scope) and  # No explicit 'scope' option has been specified, and
        $s !~ /[@.]/             # 's' option contains neither an '@' nor a dot,
                                 # so it cannot be an e-mail address or a domain.
    ) {
        # Thus it must be meant as the 'scope' option:
        $scope = $s;
    }
    else {
        # Else, it must be meant as the deprecated 'sender' option:
        $options-&gt;{mfrom} = $s;
    }
}

# Heuristic for when explicit 'scope'/'s(cope)' option is absent:
if (not defined($scope)) {
    if (defined($identity) or defined($options-&gt;{file})) {
        # Identity has been specified, or input will be read from file:
        # apply the 'scope' option default:
        $scope    = 'mfrom';
    }
    elsif (defined($options-&gt;{helo})) {
        $scope    = 'helo';
        $identity = $options-&gt;{helo};
    }
    elsif (defined($options-&gt;{mfrom})) {
        $scope    = 'mfrom';
        $identity = $options-&gt;{mfrom};
        $helo_identity ||= $options-&gt;{helo};
    }
    elsif (defined($options-&gt;{pra})) {
        $scope    = 'pra';
        $identity = $options-&gt;{pra};
    }
}

my $default_explanation = $options-&gt;{'default-explanation'};
my $hostname            = $options-&gt;{hostname};

if (
    not defined($scope) or
    not (defined($identity) xor defined($options-&gt;{file}))
) {
    usage();
    exit(255);
}

if (defined($identity) and $identity eq '' and defined $helo_identity) {
    $identity = 'postmaster@' . $helo_identity;
} elsif (defined($identity) and $identity eq '') {
    STDERR-&gt;print(&quot;Error: Empty identities are not supported without specifying HELO.\n&quot;);
    exit(255);
}

# Process the SPF Request(s)
##############################################################################

try {
    my $spf_server = Mail::SPF::Server-&gt;new(
        default_authority_explanation
                        =&gt; $default_explanation,
        hostname        =&gt; $hostname,
    #    debug           =&gt; $options-&gt;{debug},
    #    sanitize        =&gt; $options-&gt;{sanitize},

        # Black Magic:
        (
            exists($options-&gt;{'max-dns-interactive-terms'}) ?
                (max_dns_interactive_terms  =&gt; $options-&gt;{'max-dns-interactive-terms'} || undef)
            :   ()
        ),
        (
            exists($options-&gt;{'max-name-lookups-per-term'}) ?
                (max_name_lookups_per_term  =&gt; $options-&gt;{'max-name-lookups-per-term'} || undef)
            :   ()
        )
    #    rcpt_to         =&gt; $options-&gt;{'rcpt-to'},
    #    trusted         =&gt; $options-&gt;{trusted},
    #    guess           =&gt; $options-&gt;{guess},
    #    local           =&gt; $options-&gt;{local},
    #    override        =&gt; $options-&gt;{override},
    #    fallback        =&gt; $options-&gt;{fallback},
    );

    my $exit_code;

    if (not defined($options-&gt;{file})) {
        # Single request:
        my $result_code = do_process(
            $spf_server,
            versions        =&gt; @versions ? [@versions] : undef,
            scope           =&gt; $scope,
            identity        =&gt; $identity,
            ip_address      =&gt; $ip_address,
            helo_identity   =&gt; $helo_identity
        );
        $exit_code = exit_codes_by_result_code-&gt;{$result_code};
    }
    else {
        # File request:
        my $file = $options-&gt;{file} eq '-' ? \*STDIN : IO::File-&gt;new($options-&gt;{file})
            or die(&quot;Could not open: $options-&gt;{file}\n&quot;);
        while (&lt;$file&gt;) {
            chomp;
            s/^\s*//;
            next if /^$/;
            if (/^#/) {
                print(&quot;$_\n&quot;) if $options-&gt;{'keep-comments'};
                next;
            }
            ($ip_address, $identity, $helo_identity) = split;
            my $result_code = do_process(
                $spf_server,
                versions        =&gt; @versions ? [@versions] : undef,
                scope           =&gt; $scope,
                identity        =&gt; $identity,
                ip_address      =&gt; $ip_address,
                helo_identity   =&gt; $helo_identity
            );
            $exit_code ||= exit_codes_by_result_code-&gt;{$result_code};
        }
    }

    exit($exit_code);
}
catch Mail::SPF::Exception with {
    my ($e) = @_;
    STDERR-&gt;printf(&quot;Error: %s.\n&quot;, $e-&gt;text);
    exit(255);
};


# Helper Function
##############################################################################

sub do_process {
    my ($spf_server, %request_options) = @_;
    my $request = Mail::SPF::Request-&gt;new(%request_options);
    my $result  = $spf_server-&gt;process($request);
    printf(
        &quot;%s\n%s\n%s\n%s\n&quot;,
        $result-&gt;code,
        (
            $result-&gt;can('authority_explanation') ?
                $result-&gt;authority_explanation
            :   $result-&gt;local_explanation
        ),
        $result-&gt;local_explanation,
        $result-&gt;received_spf_header
    );
    return $result-&gt;code;
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2F3rdparty%2Fperl%2F542%2Fbin'>Back to Directory</a>