spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Using SRS in production

2011-02-11 04:31:30
Hello,

Am 11.02.2011 um 01:52 schrieb Mike Elliott:

On Thu, Feb 10, 2011 at 11:42:24PM +0100 or thereabouts, Jan L?hr wrote:

I'm in the need of deploying srs in production:
We're running a small site (debian, postfix as mta), that uses alias 
adresses via postfix'es virtual alias maps. Some aliases forward to external 
domains (eg. @gmail.com, @gmx.com), that perform spf checking. All virtual 
alias maps are stored in ldap (by that: if mail is received via smtp, 
postfix performs an ldap search in order to find all receivers).

In theory, srs can be implemented using a filter (for postfix) or using 
another mta as smarthost (having srs-capabilities already built in) - am I 
right?
Using google I found:
- http://www.libsrs2.org/patch/postfix-libsrs2-2.1.4-1.patch that seems 
quite old. Neither debian-security support is provided nor integration into 
postfix (upstream) is done yet.
- http://www.libsrs2.org/srs/Mail-SRS-0.31.tar.gz that might be used with 
postfix this way: http://www.postfix.org/FILTER_README.html - but I'ven't 
found an example config yet (however, a debian package exists)

So, what's your way of implementing srs?

Thanks in advance,
Keep smiling
yanosz


I have been using the http://www.libsrs2.org/srs/Mail-SRS-0.31.tar.gz
for the last seven years.  Unfortunately, I have been using it with
sendmail, so I cannot give you specific details about implementation
with postfix.  Generally, I keep a file of domain names that are
the virtual aliases.  That list is checked by SRS for alias/unalias 
work before normal processing happens.  I just have to automatically
rebuild the file if there is a change in the virtualization data files.  

Thanks for your help - anyway, has anyone just tried piping postfix virtual 
alias map entries through srs? Since all forward-entries are defined and stored 
as ldap-entries a traditionally alias file is rather painful.

Thanks,
Keep smiling
yanosz




-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ 
[http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/735/=now
RSS Feed: https://www.listbox.com/member/archive/rss/735/2183229-668e5d0d
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=2183229&id_secret=2183229-a7234b15
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=2183229&id_secret=2183229-98aa0fe6&post_id=20110211053011:E6D086FE-35C9-11E0-B019-FC69F1566CC1
Powered by Listbox: http://www.listbox.com