spf-discuss
[Top] [All Lists]

Re: [spf-discuss] Using SRS in production

2011-02-11 10:59:58
Hello,

Am 11.02.2011 um 01:52 schrieb Mike Elliott:

On Thu, Feb 10, 2011 at 11:42:24PM +0100 or thereabouts, Jan L?hr wrote:
Hello,

I'm posting here, 'cause srs-discuss (mentioned at: 
http://www.openspf.org/Forums) bounced while subscribing.

I'm in the need of deploying srs in production:
We're running a small site (debian, postfix as mta), that uses alias 
adresses via postfix'es virtual alias maps. Some aliases forward to external 
domains (eg. @gmail.com, @gmx.com), that perform spf checking. All virtual 
alias maps are stored in ldap (by that: if mail is received via smtp, 
postfix performs an ldap search in order to find all receivers).

In theory, srs can be implemented using a filter (for postfix) or using 
another mta as smarthost (having srs-capabilities already built in) - am I 
right?
Using google I found:
- http://www.libsrs2.org/patch/postfix-libsrs2-2.1.4-1.patch that seems 
quite old. Neither debian-security support is provided nor integration into 
postfix (upstream) is done yet.
- http://www.libsrs2.org/srs/Mail-SRS-0.31.tar.gz that might be used with 
postfix this way: http://www.postfix.org/FILTER_README.html - but I'ven't 
found an example config yet (however, a debian package exists)



I have been using the http://www.libsrs2.org/srs/Mail-SRS-0.31.tar.gz
for the last seven years.  Unfortunately, I have been using it with
sendmail, so I cannot give you specific details about implementation
with postfix.  Generally, I keep a file of domain names that are
the virtual aliases.  That list is checked by SRS for alias/unalias 
work before normal processing happens.  I just have to automatically
rebuild the file if there is a change in the virtualization data files.  

Good luck with the postfix side of the package.
-Mike Elliott

I've tried setting up Mail-SRS-0.31.tar.gz using ordinary alias defined 
/etc/aliases (neither virtual alias domains nor ldap yet - like 
http://www.openspf.org/SRS )
The alias looks like:
henrik.luehr: "|/usr/bin/srs --secretfile=/etc/srs.secret 
--alias=henrik(_dot_)luehr(_at_)v50993(_dot_)topnetworks(_dot_)de 
jluehr(_at_)gmx(_dot_)net"

By that, mail is delivered to srs, but not requeued after rewriting:
Feb 11 17:54:40 v50993 postfix/local[13324]: 59F46E4C069: 
to=<henrik(_dot_)luehr(_at_)v50993(_dot_)topnetworks(_dot_)de>, relay=local, 
delay=0.15, delays=0.04/0.01/0/0.09, dsn=2.0.0, status=sent (delivered to 
command: /usr/bin/srs --secretfile=/etc/srs.secret 
--alias=henrik(_dot_)luehr(_at_)v50993(_dot_)topnetworks(_dot_)de 
jluehr(_at_)gmx(_dot_)net)

How can I make srs queuing the message?

Thanks in advance,
Keep smiling
yanosz



-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ 
[http://www.listbox.com/member/]

Archives: https://www.listbox.com/member/archive/735/=now
RSS Feed: https://www.listbox.com/member/archive/rss/735/2183229-668e5d0d
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=2183229&id_secret=2183229-a7234b15
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=2183229&id_secret=2183229-98aa0fe6&post_id=20110211115944:6B0D5A60-3600-11E0-B3D9-87C1F559ED1D
Powered by Listbox: http://www.listbox.com

<Prev in Thread] Current Thread [Next in Thread>