[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Benny Pedersen via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-15 10:42: That's what Dino is trying to do. Make amavis-over-milter add an DKIM AR-header, then make OpenDMARC evaluate DMARC using that header. It may be true that SpamAssassin 4 has a DMARC test, but Amavis >does not use such test hit for a

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Damian via Postfix-users
So as per your previous post, setting a policy such as this one would do the trick? ... This would be necessary to keep DMARC AR headers after they passed the content_filter Amavis. It is not necessary for OpenDMARC to do its work. It was not clear what "skipping OpenDMARC" means exactly,

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Dino Edwards via Postfix-users
>Conceptually you can. I tested it yesterday and it worked. At first I >encountered said phenomenon that the >mails in my inbox had no DMARC AR >header, but that was because the content_filter Amavis removed them. >After >disabling DKIM verification on the content_filter, headers looked like

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Damian via Postfix-users
This question has stirred up a lot of answers but if I’m understanding correctly, it looks like I cannot use opendmarc with amavisd in postfix as a pre-queue filter for dkim. The only viable option is opendkim with opendmarc as pre-queue milters like I was originally doing. Conceptually you

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Dino Edwards via Postfix-users
>That's what Dino is trying to do. Make amavis-over-milter add an DKIM >AR-header, then make OpenDMARC evaluate DMARC using that header. It may be >true that SpamAssassin 4 has a DMARC test, but Amavis >does not use such test >hit for a policy enforcement. >Amavis has support for rspamd as a

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-15 Thread Damian via Postfix-users
currect, but amavisd support rspamd with have dmarc what? Amavis has support for rspamd as a spam_scanner, i.e. for scoring, not for DMARC policy enforcement. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have Matus UHLAR - fantomas via Postfix-users skrev

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. in what way ? amavisd-milter was already part of Dino's smtpd_milters. It is like you would have said: > http://www.postfix.org/. Just use that, it replaces the /etc you

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Matus UHLAR - fantomas via Postfix-users skrev den 2023-11-14 19:44: Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Damian via Postfix-users skrev den 2023-11-14 19:28: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. in what way ?, if you can configure opendmarc with postfix why is amavisd milter a problem ? amavisd only miss

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have it's the same as

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have ___ Postfix-users mailing list -- postfix-users@postfix.org To

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
this does not make sense unless you use it somewhere. Can you elaborate? yes, the configuration variable you showed is not used by anything, unless you refer to it elsewhere in postfix configuration. what do logs say? On 14.11.23 11:16, Dino Edwards via Postfix-users wrote: Logs don't

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread mailmary--- via Postfix-users
it happens to me sometimes, I make changes to the postfix configuration and I forget to restart postfix for it to take effect (systemctl restart postfix opendkim opendmarc etc). Could it be that simple? On Tue, 14 Nov 2023 11:16:18 -0500 Dino Edwards via Postfix-users wrote: > Logs

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
By “getting skipped” I mean I have no logs of opendmarc doing anything. Do you have logs of opendmarc doing anything if you remove Amavis from smtpd_milters? I don’t understand how I would disable dkim in my content_filter policy. Dkim verification is either enabled or disabled in Amavis

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Dino Edwards via Postfix-users
-Original Message- From: Matus UHLAR - fantomas via Postfix-users Sent: Tuesday, November 14, 2023 8:04 AM To: postfix-users@postfix.org Subject: [pfx] Re: Postfix, Amavis DKIM and DMARC >this does not make sense unless you use it somewhere. Can you elaborate? >what do lo

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Dino Edwards via Postfix-users
: Tuesday, November 14, 2023 9:13 AM To: postfix-users@postfix.org Subject: [pfx] Re: Postfix, Amavis DKIM and DMARC I tried this config but sadly it doesn’t work, OpenDMARC (127.0.0.1:54321) gets skipped completely If "getting skipped" means that you don't see Authentication-Results

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
I tried this config but sadly it doesn’t work, OpenDMARC (127.0.0.1:54321) gets skipped completely If "getting skipped" means that you don't see Authentication-Results for DMARC, I have a feeling that you didn't disable DKIM verification on your content_filter Interface Policy. Amavis will

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
On 14.11.23 07:43, Dino Edwards via Postfix-users wrote: I have been using OpenDKIM and OpenDMARC as smtpd_milters in Postfix and Amavis as a content filter. I'm trying to replace OpenDKIM with Amavis for DKIM verify and signing. The problem is that since Amavis is setup as an after-queue