> On Mar 7, 2023, at 11:37 AM, postfix--- via Postfix-users > <postfix-users@postfix.org> wrote: > >> OpenDMARC is segfaulting. That's what 'signal 11' means. Postfix fails to >> get an answer to its end-of-body milter call because of the segfault closing >> the other end of that socket. That failure results in Postfix sending a 4xx >> to the client. >> First step is to verify your installation of OpenDMARC. Make sure you have a >> current version, that its dependencies are consistent with the build, etc. > > Yes, I understood the problem to be something is "breaking" in opendmarc and > postfix is soft bouncing based on service/milter not available. What i don't > understand is why this is happening only with the new list host. This hasn't > happened with any other server and while this is going on my server is still > accepting and delivering mail from other mail servers without issue. Right > now all list mail is bouncing so please CC: me directly so i may receive > replies. > > As far as i know everything is up to date. > > [root]# opendmarc -V > opendmarc: OpenDMARC Filter v1.4.1 > SMFI_VERSION 0x1000001 > libmilter version 1.0.1 > Active code options: > WITH_SPF > WITH_SPF2
I ran into the same problem. I found that the opendmarc package in Debian bullseye is vulnerable to CVE-2021-34555, and I believe this is the source of the crash (in combination with the new email headers from the mailing list transition). I solved the problem by upgrading to the version of opendmarc in Debian testing. -- Rob Leslie r...@mars.org _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
