Package: dk-filter
Version: 1.0.0.dfsg-1
Severity: grave
Justification: renders package unusable
After setting up multiple key dk-filter with postfix I started experiencing the
following problems any time postfix attempted to contact the milter:
May 13 09:19:06 Arzamas postfix/cleanup[24894]: warning: milter
inet:127.0.0.1:20028: can't read SMFIC_EOH reply packet header: Success
May 13 09:19:06 Arzamas postfix/cleanup[24894]: 8D809B1B1C: milter-reject:
END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Service unavailable - try again
later; from=<WITHHELD> to=<WITHHELD> proto=ESMTP helo=<WITHHELD>
I executed the milter in no-forking mode and this is what I got:
[EMAIL PROTECTED]:~# /usr/bin/dk-filter -u dk-filter -P
/var/run/dk-filter/dk-filter.pid -p inet:[EMAIL PROTECTED] -c nofws -d
/etc/postfix/config/dbmail_domains.lst -D -s /etc/mail/dk.keys -k -l -f
dk-filter: util.c:47: dk_sterilize: Assertion `str != ((void *)0)' failed.
Aborted
If I go back to the -s /etc/mail/arzamas_dk setting and remove -k, everything
works as expected. I assume that dk-filter can not cope with the way I have
formatted my dk.keys. Please advise
Here are my setup details:
* both postfix and dk-filter are latest unaltered packages from debian testing
* no milter options are present in main.cf ( postconf -n | grep milter returns
empty )
* the milter is specified as '-o smtpd_milters=inet:127.0.0.1:20028' at the
smtpd
process accepting back virus scanned mail
Contents of /etc/mail/dk.keys:
==============================
[EMAIL PROTECTED]:/etc/postfix# cat /etc/mail/dk.keys
[EMAIL PROTECTED]<WITHHELD>:/etc/mail/arzamas_dk
[EMAIL PROTECTED]:/etc/postfix#
where /etc/mail/arzamas_dk was generated by:
openssl genrsa -out /etc/mail/arzamas_dk 1024
The full configuration of the loopback smtpd:
============================================
# direct pass-through daemon (feedback from mail scanning)
# carries out domainkeys signing/verification
localhost:20026 inet n - - - - smtpd
-o soft_bounce=yes
-o content_filter=
-o inet_interfaces=loopback-only
-o disable_dns_lookups=yes
-o smtpd_delay_reject=no
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_inet_interfaces,reject
-o smtpd_data_restrictions=
-o smtpd_end_of_data_restrictions=
-o smtpd_etrn_restrictions=
-o smtpd_hard_error_limit=19
-o smtpd_soft_error_limit=20
-o smtpd_error_sleep_time=0
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
-o
receive_override_options=no_header_body_checks,no_unknown_recipient_checks
-o smtpd_milters=inet:127.0.0.1:20028
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]