[opendmarc-users] OpenDMARC Postfix SPF implementation

[Scott Kitterman]

On April 25, 2014 9:48:38 PM EDT, Patrick Laimbock <patrick at laimbock.com> wrote:
>On 25-04-14 13:55, Alwin de Bruin wrote:
>> Hi,
>>
>> I am looking for a sort of guide for implementing SPF for Postfix as
>a
>> requirement for OpenDMARC.
>>
>> Am very curious in which ways you all have implemented the SPF
>requirement.
>
>I use pypolicyd-spf from https://launchpad.net/pypolicyd-spf/ If you
>use 
>RHEL or CentOS, the python-pypolicyd-spf RPM lives in the EPEL repo. 
>Install the RPM, configure /etc/python-policyd-spf/policyd-spf.conf to 
>your liking, add the postfix config below, restart postfix and you 
>should have a working SPF records checker.

The trick here is that milters don't see the first header field added. What I do is check SPF in a first smtpd instance, send the mail through spam/virus filtering, and then back to a second smtpd where I run the opendmarc milter.

Scott K