[opendmarc-users] OpenDMARC Postfix SPF implementation

[Patrick Laimbock]

On 25-04-14 13:55, Alwin de Bruin wrote:
> Hi,
>
> I am looking for a sort of guide for implementing SPF for Postfix as a
> requirement for OpenDMARC.
>
> Am very curious in which ways you all have implemented the SPF requirement.

I use pypolicyd-spf from https://launchpad.net/pypolicyd-spf/ If you use 
RHEL or CentOS, the python-pypolicyd-spf RPM lives in the EPEL repo. 
Install the RPM, configure /etc/python-policyd-spf/policyd-spf.conf to 
your liking, add the postfix config below, restart postfix and you 
should have a working SPF records checker.

Config in postfix:

/etc/postfix/main.cf

smtpd_recipient_restrictions =
    ... (the usual reject_, permit_ etc stuff)
    check_policy_service unix:private/policyd-spf


policyd-spf_time_limit = 3600


/etc/postfix/master.cf

policyd-spf unix    -       n       n       -       0      spawn
     user=nobody argv=/usr/bin/policyd-spf


HTH,
Patrick