spf-discuss
[Top] [All Lists]

Re: SPF for Sendmail - milter setup help

2004-01-12 19:41:36
----- Original Message ----- 
From: <jsb(_at_)digistar(_dot_)com>
To: <spf-discuss(_at_)v2(_dot_)listbox(_dot_)com>
Sent: Monday, January 12, 2004 7:52 PM
Subject: [spf-discuss] SPF for Sendmail - milter setup help

Ok, well, i'm not having luck implementing the Milter-SPF for
sendmail environments.

Does anyone have a brief explanation as to what is required to get
this going? I have used milter for j-chkmail in the past but am
unfamiliar with the procedure to use Mark's .pl script.

Unlike j-chkmail, spf-milter is written in Perl. So you need, for starters,
Sendmail::Milter (at CPAN). The Milter API uses threads, so you need a
thread-enabled Perl (compiled with -Duseithreads) as well.

In sendmail.cf, you need to define (at MAIL FILTER DEFINITIONS), at least,
this:

Xspf-milter, S=local:/var/spf-milter/spf-milter.sock, F=T

(add a T flag to your liking, for fine-grained timing). And this:

# Input mail filters
O InputMailFilters=spf-milter

# Milter options
O Milter.LogLevel=9
O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits}, {cert_subject},
{cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {mail_mailer},
{mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}

Things tend to change rapidly; sometimes in the nuance, sometimes in major
areas (like the provision for secondary MX). As soon as the dust has settled
on how the secondaries are supposed to be handled, and both Meng and Philip
sign off on the new "result2" call, I will, community-willing, release a new
spf-milter which will reflect the changes.

Support for SMTP AUTH checks (a SASL authenticated IP address is always
valid) will also be in the upcoming spf-milter.

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡