<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt>On 08/20/2013 02:38 PM, Murray S. Kucherawy wrote:</tt><tt><br>
</tt> <tt> </tt>
<blockquote
cite="mid:alpine.BSF.2.00.1308201238060.4874@medusa.blackops.org"
type="cite"><tt>Thanks for all the details and reproductions on
this. It will take me a few days to dig myself out of the hole
I'm in on other projects, but I will get to it ASAP. If
anyone's feeling impatient, please don't wait for me to take a
run at it. </tt><tt><br>
</tt> <tt><br>
</tt><tt> -MSK </tt><tt><br>
</tt> </blockquote>
<br>
<tt>Murray,<br>
For the record, we did some further testing with the
spf-milter-python package in Ubuntu Lucid with similar results.
When processing a message with legitimate DKIM
Authentication-Results header, the SPF-Results header doesn't seem
to be seen by opendmarc. Here is the pertinent setup info:</tt><tt><br>
</tt><tt> </tt>
<blockquote><tt>#/etc/postfix/main.cf</tt><tt><br>
</tt><tt> smtpd_milters = inet:localhost:8891 #
spf-milter-python</tt><tt><br>
</tt><tt> inet:localhost:8892 # opendkim</tt><tt><br>
</tt><tt> inet:localhost:8893 # opendmarc</tt><tt><br>
</tt><tt> </tt><tt><br>
</tt><tt> # netstat -lntp4</tt><tt><br>
</tt><tt> Active Internet connections (only servers)</tt><tt><br>
</tt><tt> Proto Recv-Q Send-Q Local Address Foreign
Address State PID/Program name</tt><tt><br>
</tt><tt> tcp 0 0 127.0.0.1:8891
0.0.0.0:* LISTEN 29025/python </tt><tt><br>
</tt><tt> tcp 0 0 127.0.0.1:8892
0.0.0.0:* LISTEN 28962/opendkim </tt><tt><br>
</tt><tt> tcp 0 0 127.0.0.1:8893
0.0.0.0:* LISTEN 28985/opendmarc </tt><br>
</blockquote>
<div class="moz-cite-prefix"><tt>Attached is what we see in the logs
(with our added debugging) when receiving a message with both
SPF and DKIM headers</tt> (headers also attached, <tt>as </tt><tt>is
our debugging patch used to produce the extra log messages</tt>).<br>
<tt><br>
Here is the portion of /var/run/opendmarc/opendmarc.dat </tt><tt><tt>
matching this message</tt>:<br>
</tt>
<blockquote><tt>job 39566203A3<br>
reporter smtp.onlight.com<br>
received 1376944893<br>
ipaddr 209.85.212.68<br>
from gmail.com<br>
mfrom gmail.com<br>
dkim gmail.com 0<br>
spf -1<br>
pdomain gmail.com<br>
policy 15<br>
rua <a class="moz-txt-link-freetext" href="mailto:mailauth-reports@google.com">mailto:mailauth-reports@google.com</a><br>
pct 100<br>
adkim 114<br>
aspf 114<br>
p 110<br>
sp 0<br>
align_dkim 4<br>
align_spf 5<br>
action 2</tt><br>
</blockquote>
<tt>Please let us know if we can be of further assistance.<br>
-nic<br>
</tt></div>
<pre class="moz-signature" cols="72">--
Nic Bernstein <a class="moz-txt-link-abbreviated" href="mailto:nic@onlight.com">nic@onlight.com</a>
Onlight, Inc. <a class="moz-txt-link-abbreviated" href="http://www.onlight.com">www.onlight.com</a>
219 N. Milwaukee St., Suite 2a v. 414.272.4477
Milwaukee, Wisconsin 53202
</pre>
</body>
</html>