From owner-freebsd-ports-bugs@FreeBSD.ORG Fri May 23 10:10:02 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0C8DB1065675 for ; Fri, 23 May 2008 10:10:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id DFAC18FC28 for ; Fri, 23 May 2008 10:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m4NAA1eZ018466 for ; Fri, 23 May 2008 10:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m4NAA1gB018465; Fri, 23 May 2008 10:10:01 GMT (envelope-from gnats) Resent-Date: Fri, 23 May 2008 10:10:01 GMT Resent-Message-Id: <200805231010.m4NAA1gB018465@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Valeriano Manassero Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9F80C106564A for ; Fri, 23 May 2008 10:02:30 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 907D88FC19 for ; Fri, 23 May 2008 10:02:30 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m4NA12NW031800 for ; Fri, 23 May 2008 10:01:02 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id m4NA12TG031799; Fri, 23 May 2008 10:01:02 GMT (envelope-from nobody) Message-Id: <200805231001.m4NA12TG031799@www.freebsd.org> Date: Fri, 23 May 2008 10:01:02 GMT From: Valeriano Manassero To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/123928: postfix-policyd-spf not working as expected X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 May 2008 10:10:02 -0000 >Number: 123928 >Category: ports >Synopsis: postfix-policyd-spf not working as expected >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri May 23 10:10:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Valeriano Manassero >Release: 7.0-RELEASE >Organization: >Environment: FreeBSD nemesis.manassero.biz 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 >Description: Hello. I set the postfix-policyd-spf to work with postfix adding in master.cf spf unix - n n - - spawn user=nobody argv=/usr/local/sbin/postfix-policyd-spf and having in main,cf: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_invalid_hostname, reject_unauth_pipelining, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_non_fqdn_recipient, reject_unknown_recipient_domain, check_policy_service unix:private/spf, check_policy_service inet:127.0.0.1:10023, reject_rbl_client zen.spamhaus.org, permit Then i remodified master.cf like this to obtain debug infos: spf unix - n n - - spawn user=nobody argv=/usr/local/sbin/postfix-policyd-spf -d1 I obtained entries like this one in the log: May 23 11:34:10 nemesis postfix/smtpd[14299]: connect from unknown[88.224.187.63] May 23 11:34:12 nemesis postfix-policyd-spf: --> request=smtpd_access_policy May 23 11:34:12 nemesis postfix-policyd-spf: --> protocol_state=RCPT May 23 11:34:12 nemesis postfix-policyd-spf: --> protocol_name=ESMTP May 23 11:34:12 nemesis postfix-policyd-spf: --> client_address=88.224.187.63 May 23 11:34:12 nemesis postfix-policyd-spf: [ip 88.224.187.63] May 23 11:34:12 nemesis postfix-policyd-spf: --> client_name=unknown May 23 11:34:12 nemesis postfix-policyd-spf: --> reverse_client_name=dsl88-244-47935.ttnet.net.tr May 23 11:34:12 nemesis postfix-policyd-spf: --> helo_name=[88.224.187.63] May 23 11:34:12 nemesis postfix-policyd-spf: [helo [88.224.187.63]] May 23 11:34:12 nemesis postfix-policyd-spf: --> sender=etfujbgr@boyum-it.com May 23 11:34:12 nemesis postfix-policyd-spf: [sender etfujbgr@boyum-it.com] May 23 11:34:12 nemesis postfix-policyd-spf: --> recipient=postmaster@contechlab.com May 23 11:34:12 nemesis postfix-policyd-spf: --> recipient_count=0 May 23 11:34:12 nemesis postfix-policyd-spf: --> queue_id= May 23 11:34:12 nemesis postfix-policyd-spf: --> instance=37db.48368f94.8761e.0 May 23 11:34:12 nemesis postfix-policyd-spf: --> size=0 May 23 11:34:12 nemesis postfix-policyd-spf: --> etrn_domain= May 23 11:34:12 nemesis postfix-policyd-spf: --> stress= May 23 11:34:12 nemesis postfix-policyd-spf: --> sasl_method= May 23 11:34:12 nemesis postfix-policyd-spf: --> sasl_username= May 23 11:34:12 nemesis postfix-policyd-spf: --> sasl_sender= May 23 11:34:12 nemesis postfix-policyd-spf: --> As you can see the policid-spf seems to work correctly, but it send no response ("action=something") to postfix that correctly continue to process the request and accept the mail. >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: