[opendmarc-users] Milter skipping messages

[Kevin Golding]

I'm trying to get opendmarc running on my FreeBSD/Postfix setup and I'm  
struggling to work out what I'm doing wrong.

Essentially I believe the problem is the milter is skipping messages when  
processed as smtpd_milters but accepting them as a non_smptd_milters. For  
example I see the following on SMTP connections:

Nov 12 16:19:32 kif postfix/smtpd[49273]: skipping event SMFIC_HELO for  
milter inet:localhost:8893
Nov 12 16:19:32 kif postfix/smtpd[49273]: > localhost[127.0.0.1]: 250  
kif.compliantgroup.com
Nov 12 16:19:32 kif postfix/smtpd[49273]: < localhost[127.0.0.1]: QUIT
Nov 12 16:19:32 kif postfix/smtpd[49273]: > localhost[127.0.0.1]: 221  
2.0.0 Bye
Nov 12 16:19:32 kif postfix/smtpd[49273]: match_hostname: localhost ~?  
127.0.0.1
Nov 12 16:19:32 kif postfix/smtpd[49273]: match_hostaddr: 127.0.0.1 ~?  
127.0.0.1
Nov 12 16:19:32 kif postfix/smtpd[49273]: abort all milters
Nov 12 16:19:32 kif postfix/smtpd[49273]: milter8_abort: abort milter  
inet:localhost:8893
Nov 12 16:19:32 kif postfix/smtpd[49273]: disconnect event to all milters
Nov 12 16:19:32 kif postfix/smtpd[49273]: milter8_disc_event: quit milter  
inet:localhost:8893
Nov 12 16:19:32 kif postfix/smtpd[49273]: disconnect from  
localhost[127.0.0.1]
Nov 12 16:19:32 kif postfix/smtpd[49273]: master_notify: status 1
Nov 12 16:19:32 kif postfix/smtpd[49273]: connection closed


A bit of hunting showed that I had misunderstood the IgnoreHosts setting  
and I'd included localhost in there when I should actually remove it. So  
now my IgnoreHosts files lists another relay on the assumption that I need  
something in there to avoid skipping the default 127.0.0.1

I still get the above results though, it seems to be matching localhost  
and skipping the message.

In an attempt to debug a little more I actually set non_smtpd_milters to  
try the milter and...

Nov 12 03:07:00 kif postfix/cleanup[73580]: D06C6186A6CF:  
message-id=<20151112020659.D06C6186A6CF at kif.compliantgroup.com>
Nov 12 03:07:00 kif opendmarc[16951]: implicit authentication service:  
kif.compliantgroup.com
Nov 12 03:07:00 kif opendmarc[16951]: D06C6186A6CF: kif.compliantgroup.com  
none

That looks remarkably like what I suspect I should be seeing in general.  
But I don't see any real value in running opendmarc on system generated  
mails, it was just a curious belts and braces type setting to see what was  
going on, and even if there is the main intent is to be trying to check  
inbound mail which means I still want the smtp_milters version working.

All of which means I'm scratching my head wondering why one works and not  
the other since they're both basically localhost connections to the milter  
as far as I can see. So I'm left feeling that I'm missing something  
painfully obvious, and would appreciate a pointed where to start looking  
if anyone has any ideas.

Cheers,
Kevin