Am 07.05.2017 um 13:08 schrieb Matus UHLAR - fantomas: >>> > > On 07.05.17 00:46, Thore Boedecker wrote: >>> > > > Thanks for all the great advice so far. >>> > > > >>> > > > Currently I'm playing around with opendkim->opendmarc->amavisd >>> on my >>> > > > testserver. >>> > > > >>> > > > My current postfix setup is using spampd as proxy and thus any >>> > > > opendkim/opendmarc milters won't work in cojunction. >>> >>> > > > I've been planning to switch to amavis and use it as a milter for >>> > > > quite some time now so maybe I should get on with it. >>> [...] >>> > > > Compiling opendmarc against libspf2 makes the opendmarc >>> internal SPF >>> > > > checker functional and now the SA SPF checks (triggered by >>> amavis) are >>> > > > firing as well. >>> >>> > On 07.05.17 - 11:46, Matus UHLAR - fantomas wrote: >>> > > I would like to note that SPF can be used without openDMARC, and >>> imho should >>> > > work in SA itself. >>> > > >>> > > Did you (try to) make SPF working on valhalla.nano-srv.net? >>> >>> On 07.05.17 12:05, Thore Boedecker wrote: >>> > It seems that I simply forgot the load the SPF module in my >>> > spamassassin config. >>> > >>> > A few test mails from different servers are now hitting at least >>> > the SPF_HELO_PASS rule but nothing else so far. > >> On 07.05.17 - 12:27, Matus UHLAR - fantomas wrote: >>> try running spamassassin -D on a mail, if you get something like: >>> >>> May 6 22:38:47.009 [30327] dbg: spf: relayed through one or more >>> trusted >>> relays, cannot use header-based Envelope-From, skipping >>> >>> it may be caused by postfix forwarding mail via localhost >>> - it's better to know if spampd (or later amavisd) can work around that. >>> >>> SPF_PASS, SPF_NEUTRAL, SPF_NONE, SPF_SOFTFAIL and SPF_FAIL will indicate >>> that SPF works as expected. > > On 07.05.17 12:46, Thore Boedecker wrote: >> I have played around with it and SA is not performing actual SPF >> queries/validations due to the use of spampd on localhost as a proxy. > > that's why I recommended trying policyd-spf on valhalla.nano-srv.net > - it could be able to push Received-SPF: header SA could use after... > >> The only way around this, that I know of, would be to switch to amavis >> as it can be used as a milter. >> Or is there a way to make SA work as a milter in postfix? > > spamass-milter should be supported.
works perfect since years > I run amavisd-milter on one machine. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
