All, Apologies that this isn't postfix software specific.
Because it gets discussed enough here, myself and the others on the opendmarc team are coming pretty close to releasing opendmarc 1.4.1, which includes a lot of rework to both our own inbuilt SPF handling code, as well as a number of other bugfixes to deal with CVE's.
For those with an interest, we'd appreciate it if you could check out our "develop" branch via git and see if a "make check" passes on your platform of choice, either with the built-in SPF library, (which we're deprecating but has recently had work done on), or when built against libspf2. You'll want to configure with --enable-live-tests and --enable-filter-tests (and for the latter, you'll need miltertest from opendkim).
We know there are still some compiler warnings and such, but we'd really like to get this out the door soon.
If you hit a show-stopper, push an issue to our github or contact me privately.
Best, -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------