MSMilter and spf

[Maarten]

Just one question which milter protocol version does msmilter need?

http://www.postfix.org/postconf.5.html#milter_protocol
http://www.postfix.org/MILTER_README.html

Or will the default version suffice?
/etc/postfix/main.cf <http://www.postfix.org/postconf.5.html>:
# Postfix ≥ 2.6
milter_protocol <http://www.postfix.org/postconf.5.html#milter_protocol> = 6
# 2.3 ≤ Postfix ≤ 2.5
milter_protocol <http://www.postfix.org/postconf.5.html#milter_protocol> = 2


On 10/23/21 22:16, Maarten via MailScanner wrote:
> Thanks for your reply Shawn. It seems to be working now, I think I 
> missed something. I restored my old configuration
> to verify it and then I ran into some other issues which didn't have 
> anything to do with mailscanner or postfix which I
> fixed. After my old configuration was restored and working again, I 
> tested it and my spf and dkim were working there.
> So I went  through the milter configuration  again and It seems to be 
> working now, both my dkim and spf.  Even though
> I have a backup mailserver I was sweating a little because I didn't 
> know where it went wrong since I followed the
> mailscanner guide. I think I may have overlooked something while doing 
> it and reacted by changing something elsewhich
> caused some other issues. I'll leave it running for a day or so and 
> see what happens. From all my testing I have done so
> far it's all good.
>
> See the last test mail I sent from a gmail account:
>
> Return-Path: <example at gmail.com>
> X-Original-To: gmail at example.com
> Delivered-To: mailinglists at example.com
> Received: from magik (localhost [127.0.0.1])
>     by magik.example.com (Postfix) with ESMTP id DD3AFE0ABB
>     for <gmail at example.com>; Sat, 23 Oct 2021 22:11:27 +0200 (CEST)
> DKIM-Filter: OpenDKIM Filter v2.11.0 magik.example.com DD3AFE0ABB
> Authentication-Results: magik.example.com;
>     dkim=pass (2048-bit key; unprotected) header.d=gmail.com 
> header.i=@gmail.com header.a=rsa-sha256 header.s=20210112 
> header.b=e7od2eYB
> X-Spam-Status: No
> X-FMB-MailScanner-From: example at gmail.com
> X-FMB-MailScanner: Found to be clean
> X-FMB-MailScanner-ID: D8845E0AB8.AA5CD
> X-FMB-MailScanner-Information: Please contact hostmaster at example.com 
> for more information
> Received: from mail-ed1-f54.google.com (mail-ed1-f54.google.com 
> [209.85.208.54])
>     (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
>     (no client certificate requested)
>     by magik (MailScanner Milter) with SMTP id D8845E0AB8
>     for <gmail at example.com>; Sat, 23 Oct 2021 22:11:22 +0200 (CEST)
> Received-SPF: Pass (mailfrom) identity=mailfrom; 
> client-ip=209.85.208.54; helo=mail-ed1-f54.google.com; 
> envelope-from=example at gmail.com; receiver=<UNKNOWN>
> DKIM-Filter: OpenDKIM Filter v2.11.0 magik.example.com D8845E0AB8
> Received: by mail-ed1-f54.google.com with SMTP id w15so306888edc.9
>         for <gmail at example.com>; Sat, 23 Oct 2021 13:11:22 -0700 (PDT)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>         d=gmail.com; s=20210112;
>         h=mime-version:from:date:message-id:subject:to;
>         bh=5siPEmJlMA6PG5q+Ww7Th7cXsTfPnNnJzHDNbY+kXbA=;
> b=e7od2eYBMzIj7F4ZGmRX3EYuVqE6zxRXaWjQEkZ9oOGViT+paDRn8YlyOh1n3i8UIA
> 43w4VEG8COdC44M9S2XhgowQb3RCAt8Jp7YmR9JuzExlC/1B7UDTO5smEWzyZWWkbcWE
> g4FXqC7kwRe/OR8AELB9ok76spHKOnhTELcYNPLeFLQiMqXXhWgp08nKPflWY6IgxQlJ
> p6x+OpUsTuet+6kRnG5YBLYMIcxmUBl3uj2ygqF6ygOjnvCdVqfwTzvag0lCi3Ny3See
> RGfc9X+kVeOPiWWUTdXfirGOa+BOM8jtHDN1y6zs1LPM6pBJd6XWn/geM6CmiY4GM+6s
>          E8Bg==
>
>
> Thanks for your reply! Have a great day!
>
> On 10/23/21 19:49, Shawn Iverson via MailScanner wrote:
>> Typically, this is implemented in postfix with something like 
>> postfix-policyd. Do you still have this or something similar?
>>
>> On 10/23/21 1:18 PM, Maarten via MailScanner wrote:
>>> It's been a a few years since msmilter was first implemented in 
>>> mailscanner. I had been using the
>>> traditional since I started using mailscanner. I had some time on my 
>>> hands and I thought I would
>>> try the msmilter configuration also because I haven't seen any 
>>> recent issues in the list come along
>>> so I thought that is a good sign. It was easy to setup because the 
>>> documentation is well done and
>>> my mail is received as expected. So first of all I would like to say 
>>> thank you to those who implemented
>>> the milter option. However I am running in one small thing which 
>>> isn't working correctly and that
>>> has been since I went from traditional to milter configuration.
>>>
>>> Before the switch to the milter configuration postfix would add a 
>>> line like this to the headers:
>>>
>>> Received-SPF: Pass (mailfrom) identity=mailfrom; 
>>> client-ip=204.92.22.85; helo=mail03.engage.redhat.com; 
>>> envelope-from=noreply at engage.redhat.com; receiver=<UNKNOWN>
>>>
>>> Since I made the switch to milter that is not happening anymore, any 
>>> idea why that is happening?
>>>
>>> Maarten
>>>
>>>
>>>
>>
>>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20211024/b39474c4/attachment.html>