amavisd, postfix and dkfilter?

Is anyone using amavisd with postfix and dkfilter?  I need
to attach 
domain keys to my outgoing mail and am getting confused. 
dkfilter wants 
to be a content_filter and if  I'm seeing this correctly, it
seems that 
postfix can only have one content_filter and that needs to
be amavisd.

Help, pointers to documentation, etc. are appreciated.

thanks,

--charlie

-- 
------------------------------------------------------------
------------
Charles Farinella 
Appropriate Solutions, Inc. (www.AppropriateSolutions.com)
cfarinellaAppropriateSolutions.com
voice: 603.924.6079   fax: 603.924.8668


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

On 16.05.2007 21:33, Charlie Farinella wrote:
> Is anyone using amavisd with postfix and dkfilter?  I
need to attach 
> domain keys to my outgoing mail and am getting
confused.  dkfilter wants 
> to be a content_filter and if  I'm seeing this
correctly, it seems that 
> postfix can only have one content_filter and that needs
to be amavisd.
> 
> Help, pointers to documentation, etc. are appreciated.

http://www.ijs.si/software/amavisd/amavisd-new-docs
.html#dkim

-- 
Eray

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Charlie Farinella wrote:
> Is anyone using amavisd with postfix and dkfilter?  I
need to attach 
> domain keys to my outgoing mail and am getting
confused.  dkfilter wants 
> to be a content_filter and if  I'm seeing this
correctly, it seems that 
> postfix can only have one content_filter and that needs
to be amavisd.

Actually, postfix can have multiple content_filters, but
each message can only
pass through one of them, so that doesn't help you. 
dkfilter can run in
"before-queue" mode and let amavisd run in
"after-queue" mode, but the
before-queue method is not recommended because it's
inefficient.

However, you can chain content filters to each other. 
Postfix only knows
about the first one, and the last one reinjects back into
postfix.

For example you configure postfix (via content_filter) to
transmit on 10025
and listen on 10027, you configure dkfilter to listen on
port 10025 and
transmit on 10026, and you configure amavisd to listen on
port 10026 and
transmit on 10027.  It goes:

  postfix -(10025)-> dkfilter -(10026)-> amavisd
-(10027)-> postfix

You could push the mail through amavisd first and dkfilter
second.  However
amavis's spamassassin might be able to use the
Authentication-Results header
for bayes analysis.

Cheers
Jeremy


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Charlie Farinella wrote the following on 5/16/2007 11:33 AM
-0800:
> Is anyone using amavisd with postfix and dkfilter?  I
need to attach 
> domain keys to my outgoing mail and am getting
confused.  dkfilter wants 
> to be a content_filter and if  I'm seeing this
correctly, it seems that 
> postfix can only have one content_filter and that needs
to be amavisd.
>
> Help, pointers to documentation, etc. are appreciated.
>   

I'm not using dkfilter, but rather dk-milter, postfix, and
amavisd-new. 
Depending on what version of postfix you are using (v2.3 or
newer), you
might consider using dk-milter and set it up to sign only
outgoing mail
for your domain(s) - you can find a link to it from the
Postfix add-on
page:  http://www.postfix
.org/addon.html.

If you decide to consider dk-milter, see the postfix
MILTER_README: 
http://www.
postfix.org/MILTER_README.html for setup and
configuration
information.

Otherwise, you could consider running multiple
content_filters, either
chained (postfix -> dkfilter -> amavisd -> postfix)
or setup amavisd-new
via main.cf and dkfilter via master.cf under smtpd (postfix
-> dkfilter
-> postfix -> amavisd -> postfix).  Either will
work, but the second
option may be easier to setup and maintain.

As for setting up dkfilter to work with postfix, I have not
used it, but
the dkfilter site recommends:
http://www.postfix.org/CONTENT_INSPECTION_README.html
for postfix setup
information.

Bill

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Charlie,

> Is anyone using amavisd with postfix and dkfilter?  I
need to attach
> domain keys to my outgoing mail and am getting
confused.  dkfilter wants
> to be a content_filter and if  I'm seeing this
correctly, it seems that
> postfix can only have one content_filter and that needs
to be amavisd.
>
> Help, pointers to documentation, etc. are appreciated.

Like Eray Aslan wrote, start with:
  http://www.ijs.si/software/amavisd/amavisd-new-docs
.html#dkim

If the intention is signing, then the signing filter should
preferably be positioned after a content filter, not before
it,
e.g.
  postfix -> amavisd -> DKIM Proxy -> postfix

or:
  postfix -> amavisd -> postfix
                          |
                        dkim-milter

Note that the use of dkfilter (based on Mail:omainKay
s)
is not recommended. DomainKeys is now treated as a
historical
document, all new uses should use DKIM. There are several
architectural (and implementational) problem with it,
e.g. treating of repeated header fields such as 'Received'.

Google has switched by now (earlier this year).


http://www.ijs.si/software/amavisd/amavisd-new-docs
.html#dkim :
  On the other hand there exists a dkfilter SMTP-proxy by
the same author,
  which calls a Perl module Mail:omainKay
s, which in turn is not recommended
  because of its design limitation which requires loading
the whole message
  into memory.


$ man Mail:omainKey
s

  NAME
       Mail:omainKey
s - A perl implementation of DomainKeys

  CAVEAT
       THIS MODULE IS OFFICIALLY UNSUPPORTED.

       Please move on to DKIM like a responsible Internet
user.  I have.

       I will leave this module here on CPAN for a while,
just in case someone
       has grown to depend on it.  It is apparent that DK
will not be the way
       of the future. Thus, it is time to put this module to
ground before it
       causes any further harm.

       Thanks for your support, Anthony


$ man Mail::SpamAssassin::Plugin:omainKey
s

       Note that if the
"Mail::SpamAssassin::Plugin:KIM"
; plugin is installed
       with "Mail:KIM"
; version 0.20 or later, that plugin will also perform
       Domain Key lookups on DomainKey-Signature headers, in
which case this
       plugin is redundant.

       Here is author's note from module "Mail:omainKey
s" version 1.0:

         THIS MODULE IS OFFICIALLY UNSUPPORTED.

         Please move on to DKIM like a responsible Internet
user.  I have.


Mark


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

> Note that the use of dkfilter (based on Mail:omainKay
s)
> is not recommended. DomainKeys is now treated as a
historical
> document,

See rfc4870, "Category: Historic", "Obsoleted
By: 4871"

> all new uses should use DKIM. There are several 
> architectural (and implementational) problem with it,
> e.g. treating of repeated header fields such as
'Received'.
> Google has switched by now (earlier this year).

The DKIM standard has just been published by the IETF.
See:
        http://www.ietf.o
rg/rfc/rfc4871.txt

        DomainKeys Identified Mail (DKIM) Signatures

Mark

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

On Monday 21 May 2007, Mark Martinec wrote:
> > Is anyone using amavisd with postfix and dkfilter?
 I need to
> > attach domain keys to my outgoing mail and am
getting confused. 
> > dkfilter wants to be a content_filter and if  I'm
seeing this
> > correctly, it seems that postfix can only have one
content_filter
> > and that needs to be amavisd.
> >
> > Help, pointers to documentation, etc. are
appreciated.
>
> Like Eray Aslan wrote, start with:
>   http://www.ijs.si/software/amavisd/amavisd-new-docs
.html#dkim

Thanks to all who responded, the information is exactly what
I need.  I 
am having this problem currently:

In the above referenced doc, there is an instruction to
place the 
following in the Postfix main.cf file:
=
check_sender_access
regexp:/etc/postfix/filter_10024_catchall
=

When I restart Postfix, it fails and I find this in my log:
=
fatal: open dictionary: expecting "type:name" form
instead of "regexp:"
=

Have I misunderstood the instruction?

thanks,

--charlie


-- 
------------------------------------------------------------
------------
Charles Farinella 
Appropriate Solutions, Inc. (www.AppropriateSolutions.com)
cfarinellaAppropriateSolutions.com
voice: 603.924.6079   fax: 603.924.8668


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

On Wednesday 23 May 2007, Charlie Farinella wrote:

Please disregard, I found a typo.  Thanks again for the
help.

> Thanks to all who responded, the information is exactly
what I need. 
> I am having this problem currently:
>
> In the above referenced doc, there is an instruction to
place the
> following in the Postfix main.cf file:
> =
> check_sender_access
regexp:/etc/postfix/filter_10024_catchall
> =
>
> When I restart Postfix, it fails and I find this in my
log:
> =
> fatal: open dictionary: expecting "type:name"
form instead of
> "regexp:" =
>



-- 
------------------------------------------------------------
------------
Charles Farinella 
Appropriate Solutions, Inc. (www.AppropriateSolutions.com)
cfarinellaAppropriateSolutions.com
voice: 603.924.6079   fax: 603.924.8668


------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/