Re: [gentoo-dev] RFC: Supprting SPF on our mail servers

[Spider]

begin  quote
On Fri, 12 Mar 2004 20:03:04 +0100
Spider <spider@g.o> wrote:

>
> Well, as said. This only works for destination: gentoo.org ,  Which
> really doesn't solve this issue, What is "required" is the From: based
> rules to make sure SPF is used on -all- messages, not just on messages
> to gentoo.org lists and users.
>
>
> Does anyone have a solution for this?
>


okay, took me a while to deal with this :
 in /etc/postfix/main.cf
smtpd_sender_restrictions = check_sender_access
hash:/etc/postfix/mail_reroute,  permit


in /etc/postfix/mail_reroute

spider@g.o FILTER smtp:smtp.gentoo.org


And then postmod mail_reroute to generate the .db 


now however, this will make it relay the email to smtp.gentoo.org, which
with the current config of smtp.gentoo.org gives :


Mar 12 22:49:51 Darkmere postfix/smtpd[32534]: 86DB117001:
client=localhost[127.0.0.1] 

Mar 12 22:49:51 Darkmere postfix/smtpd[32534]: 86DB117001: filter: RCPT
from localhost[127.0.0.1]: <spider@g.o>: Sender address triggers
FILTER smtp:smtp.gentoo.org; from=<spider@g.o>
to=<spider@×××××××.com> proto=SMTP helo=<Darkmere.darkmere> 

Mar 12 22:49:51 Darkmere postfix/cleanup[32537]: 86DB117001:
message-id=<20040312224932.52bd3194.spider@g.o> 

Mar 12 22:49:51 Darkmere postfix/qmgr[32518]: 86DB117001:
from=<spider@g.o>, size=1308, nrcpt=1 (queue active) 

Mar 12 22:49:51 Darkmere postfix/smtpd[32534]: disconnect from
localhost[127.0.0.1]
Mar 12 22:49:52 Darkmere postfix/smtp[32539]: 86DB117001:
to=<spider@×××××××.com>, relay=emu.gentoo.org[128.193.0.39], delay=1,
status=bounced (host emu.gentoo.org[128.193.0.39] said: 550 relay not
permitted (in reply to RCPT TO command)) 

Mar 12 22:49:53 Darkmere postfix/cleanup[32537]: 0DAA117002:
message-id=<20040312214953.0DAA117002@××××××××.darkmere> 

Mar 12 22:49:53 Darkmere postfix/qmgr[32518]: 0DAA117002: from=<>,
size=3018, nrcpt=1(queue active) 

Mar 12 22:49:53 Darkmere postfix/smtp[32539]: 0DAA117002:
to=<spider@g.o>, relay=mail.gentoo.org[128.193.0.39], delay=0,
status=sent (250 OK id=1B1uXT-0004



So in the end, its nigh.
   anyone who has a better solution?
  //Spider
-- 
begin  .signature
Tortured users / Laughing in pain
See Microsoft KB Article Q265230 for more information.
end