Package: dk-filter
Version: 1.0.0.dfsg-1
Severity: grave
Justification: renders package unusable


After setting up multiple key dk-filter with postfix I started experiencing the
following problems any time postfix attempted to contact the milter:

May 13 09:19:06 Arzamas postfix/cleanup[24894]: warning: milter 
inet:127.0.0.1:20028: can't read SMFIC_EOH reply packet header: Success
May 13 09:19:06 Arzamas postfix/cleanup[24894]: 8D809B1B1C: milter-reject: 
END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Service unavailable - try again 
later; from=<WITHHELD> to=<WITHHELD> proto=ESMTP helo=<WITHHELD>

I executed the milter in no-forking mode and this is what I got:

[EMAIL PROTECTED]:~# /usr/bin/dk-filter -u dk-filter -P 
/var/run/dk-filter/dk-filter.pid -p inet:[EMAIL PROTECTED] -c nofws -d 
/etc/postfix/config/dbmail_domains.lst -D -s /etc/mail/dk.keys -k -l -f
dk-filter: util.c:47: dk_sterilize: Assertion `str != ((void *)0)' failed.
Aborted

If I go back to the -s /etc/mail/arzamas_dk setting and remove -k, everything 
works as expected. I assume that dk-filter can not cope with the way I have
formatted my dk.keys. Please advise


Here are my setup details:

* both postfix and dk-filter are latest unaltered packages from debian testing
* no milter options are present in main.cf ( postconf -n | grep milter returns 
empty )
* the milter is specified as '-o smtpd_milters=inet:127.0.0.1:20028' at the 
smtpd
    process accepting back virus scanned mail



Contents of /etc/mail/dk.keys:
==============================
[EMAIL PROTECTED]:/etc/postfix# cat /etc/mail/dk.keys 
[EMAIL PROTECTED]<WITHHELD>:/etc/mail/arzamas_dk

[EMAIL PROTECTED]:/etc/postfix# 


where /etc/mail/arzamas_dk was generated by:
openssl genrsa -out /etc/mail/arzamas_dk 1024



The full configuration of the loopback smtpd:
============================================
# direct pass-through daemon (feedback from mail scanning)
# carries out domainkeys signing/verification
localhost:20026 inet n  -       -       -       -       smtpd
    -o soft_bounce=yes
    -o content_filter=
    -o inet_interfaces=loopback-only
    -o disable_dns_lookups=yes
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_inet_interfaces,reject
    -o smtpd_data_restrictions=
    -o smtpd_end_of_data_restrictions=
    -o smtpd_etrn_restrictions=
    -o smtpd_hard_error_limit=19
    -o smtpd_soft_error_limit=20
    -o smtpd_error_sleep_time=0
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o 
receive_override_options=no_header_body_checks,no_unknown_recipient_checks
    -o smtpd_milters=inet:127.0.0.1:20028



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to