Subject: Re: SPF + Postfix + Debian Etch - msg#00024

Previous Message by Date:

SPF + Postfix + Debian Etch

Dear all, I've Postfix 2.0 in Debian Etch and I've installed these packages in order to try SPF in my mail server: 1) apt-get install libmail-spf-query-perl 2) wget postfix-policyd-spf-perl 1.08 (from www.spf.org) 3) cp postfix-policyd-spf-perl /usr/lib/postfix/policyd-spf-perl 4) In master.cf I add: policy unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl 5) In main.cf I add: smtpd_recipient_restrictions = reject_unauth_destination check_policy_service unix:privacy/policy 6) Restart Postfix After that I see the mail.log and see this: Dec 4 16:42:10 mail1 postfix/spawn[32669]: warning: command /usr/bin/perl exit status 2 Dec 4 16:42:10 mail1 postfix/smtpd[32667]: warning: premature end-of-input on private/policy while reading input attribute name Dec 4 16:42:11 mail1 postfix/smtpd[32667]: warning: problem talking to server private/policy: Connection reset by peer What happens with this lines ??? How can I monitor if SPF is now working or not ?? Another question: what do I have to do wit "unix:privacy/policy" ??? Should I have to create a file system file for this ?? Really thanks, alejandro.-

Next Message by Date:

Re: SPF + Postfix + Debian

Scott Kitterman wrote: On Tuesday 05 December 2006 10:42, Alejandro wrote: Dear all, I've Postfix 2.0 in Debian Etch and I've installed these packages in order to try SPF in my mail server: The Postfix version in Etch is Postfix 2.3.3: http://packages.debian.org/testing/mail/postfix In order to use a policy server, you need to have at least Postfix 2.1. Even Debian Stable has Postfix 2.1. You need to upgrade your Postfix. 1) apt-get install libmail-spf-query-perl 2) wget postfix-policyd-spf-perl 1.08 (from www.spf.org) 3) cp postfix-policyd-spf-perl /usr/lib/postfix/policyd-spf-perl 4) In master.cf I add: policy unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl 5) In main.cf I add: smtpd_recipient_restrictions = reject_unauth_destination check_policy_service unix:privacy/policy 6) Restart Postfix After that I see the mail.log and see this: Dec 4 16:42:10 mail1 postfix/spawn[32669]: warning: command /usr/bin/perl exit status 2 Dec 4 16:42:10 mail1 postfix/smtpd[32667]: warning: premature end-of-input on private/policy while reading input attribute name Dec 4 16:42:11 mail1 postfix/smtpd[32667]: warning: problem talking to server private/policy: Connection reset by peer What happens with this lines ??? How can I monitor if SPF is now working or not ?? The policyd-spf-perl logs SPF results to wherever your syslog logs mail (e.g. /var/log/mail.log). Another question: what do I have to do wit "unix:privacy/policy" ??? Should I have to create a file system file for this ?? The problem you are seeing is that Postfix 2.0 doesn't support Policy daemons. Make sure /usr/lib/postfix/policyd-spf-perl is owned by nobody. In addition to upgrading your Postfix, review the Postfix Policy readme here: http://www.postfix.org/SMTPD_POLICY_README.html Let us know if you have questions. Scott K ------- Archives at http://archives.listbox.com/spf-help/current/ or http://www.gossamer-threads.com/lists/spf/help/ (easier to search) To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?& Dear Scott, I was wrong in my server description..sorry. I have Debian Sarge with Postfix 2.1.5-9, so I think it's ok to use with SPF. While reading your mail I realized that /usr/lib/postfix/policyd-spf-perl is owned by nobody is owned by root and not by nobody So after I'll make this change....how can I do to see if SPF is really working ?? Can I look for any particular string at mail.log ??? Thanks again !!!! alejandro.-

Previous Message by Thread:

SPF + Postfix + Debian Etch

Dear all, I've Postfix 2.0 in Debian Etch and I've installed these packages in order to try SPF in my mail server: 1) apt-get install libmail-spf-query-perl 2) wget postfix-policyd-spf-perl 1.08 (from www.spf.org) 3) cp postfix-policyd-spf-perl /usr/lib/postfix/policyd-spf-perl 4) In master.cf I add: policy unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl 5) In main.cf I add: smtpd_recipient_restrictions = reject_unauth_destination check_policy_service unix:privacy/policy 6) Restart Postfix After that I see the mail.log and see this: Dec 4 16:42:10 mail1 postfix/spawn[32669]: warning: command /usr/bin/perl exit status 2 Dec 4 16:42:10 mail1 postfix/smtpd[32667]: warning: premature end-of-input on private/policy while reading input attribute name Dec 4 16:42:11 mail1 postfix/smtpd[32667]: warning: problem talking to server private/policy: Connection reset by peer What happens with this lines ??? How can I monitor if SPF is now working or not ?? Another question: what do I have to do wit "unix:privacy/policy" ??? Should I have to create a file system file for this ?? Really thanks, alejandro.-

Next Message by Thread:

Re: SPF + Postfix + Debian

Scott Kitterman wrote: On Tuesday 05 December 2006 10:42, Alejandro wrote: Dear all, I've Postfix 2.0 in Debian Etch and I've installed these packages in order to try SPF in my mail server: The Postfix version in Etch is Postfix 2.3.3: http://packages.debian.org/testing/mail/postfix In order to use a policy server, you need to have at least Postfix 2.1. Even Debian Stable has Postfix 2.1. You need to upgrade your Postfix. 1) apt-get install libmail-spf-query-perl 2) wget postfix-policyd-spf-perl 1.08 (from www.spf.org) 3) cp postfix-policyd-spf-perl /usr/lib/postfix/policyd-spf-perl 4) In master.cf I add: policy unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl 5) In main.cf I add: smtpd_recipient_restrictions = reject_unauth_destination check_policy_service unix:privacy/policy 6) Restart Postfix After that I see the mail.log and see this: Dec 4 16:42:10 mail1 postfix/spawn[32669]: warning: command /usr/bin/perl exit status 2 Dec 4 16:42:10 mail1 postfix/smtpd[32667]: warning: premature end-of-input on private/policy while reading input attribute name Dec 4 16:42:11 mail1 postfix/smtpd[32667]: warning: problem talking to server private/policy: Connection reset by peer What happens with this lines ??? How can I monitor if SPF is now working or not ?? The policyd-spf-perl logs SPF results to wherever your syslog logs mail (e.g. /var/log/mail.log). Another question: what do I have to do wit "unix:privacy/policy" ??? Should I have to create a file system file for this ?? The problem you are seeing is that Postfix 2.0 doesn't support Policy daemons. Make sure /usr/lib/postfix/policyd-spf-perl is owned by nobody. In addition to upgrading your Postfix, review the Postfix Policy readme here: http://www.postfix.org/SMTPD_POLICY_README.html Let us know if you have questions. Scott K ------- Archives at http://archives.listbox.com/spf-help/current/ or http://www.gossamer-threads.com/lists/spf/help/ (easier to search) To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?& Dear Scott, I was wrong in my server description..sorry. I have Debian Sarge with Postfix 2.1.5-9, so I think it's ok to use with SPF. While reading your mail I realized that /usr/lib/postfix/policyd-spf-perl is owned by nobody is owned by root and not by nobody So after I'll make this change....how can I do to see if SPF is really working ?? Can I look for any particular string at mail.log ??? Thanks again !!!! alejandro.-