[opendmarc-users] Problems with 1.3.2~Beta0..deb and this mailing list failing DMARC

[Juri Haberland]

On 08.11.2016 00:48, Steve Jenkins wrote:

> Scott: You must have read my mind, I was about to email you privately today
> to see which of the many OpenDMARC beta patches you were including in the
> Debian repo, as I've been hankering to refresh the Fedora/RHEL builds. I
> also had a brief convo with Murray today. He's slammed at work lately, but
> he did indicate that he'd try to get a new beta build out soon that
> incorporates the patches that have been floating around.
> 
> If you *do* decide to go ahead with the current source bits, please let us
> know when you check the build in to the repos. I'd like to keep the same
> patches in the RedHat builds, too.

I'd like to suggest at least the following tickets, which are all bugs in
1.3.2-beta0 (or even older):

ticket  95 - SPF validation fail for ipv6
ticket 153 - duplicate dkim auth_result sections
ticket 165 - SPF Internal check fails on helo
ticket 166 - wrong report start and end times in DMARC reports
ticket 171 - inconsistent variable names: OPENDMARC_TEST_*
ticket 174 - Size limit is not stripped from ruf address
ticket 181 - fix for help output of opendmarc-reports
ticket 185 - Segfaults every connection attempts
ticket 186 - Bug in dmarcf_config_reload function
ticket 187 - compile and functional fix for SPF result logging (you already
have a slightly in your packages I assume)
ticket 188 - bug fix: don't delete zip file too early in opendmarc-reports
ticket 194 - bug: wrong DMARC state in Auth-Res header
ticket 195 - bug: Received-SPF: header results wrong
ticket 196 - bug: all messages are recorded in history file despite
RecordAllMessages = false
ticket 197 - remove one of the two MySQL DB schemata

The following is based on the patch Scott posted - I just created a ticket
for documentation purposes:
Ticket 189 - change documentation to be Debian-compliant

I really would like to see this patch in your packages, because without it
you can not reliably reject messages on DMARC fail, as so many mailing
lists are not DKIM clean (At lease Andreas Schulze an me are running this
patch in production for more than five month):

ticket 180 - Override MLM patch


  Juri