Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running a postfix mta with debian wheezy. I am using postfix-policyd-spf-python, openkdim and opendmarc. When receiving e-mails from google (google apps with own domain) for example, the header looks like this:

Authentication-Results:; dkim=pass
    reason="1024-bit key; insecure key"
    header.b=OswLe0N+; dkim-adsp=pass; dkim-atps=neutral<br>
Authentication-Results:; spf=pass (sender SPF authorized) (client-ip=2a00:1450:400c:c00::242;;;
Authentication-Results:; dmarc=pass<br>

This means any of these programs creates it's own Authentication-Results:-Line. Is it possible to tell postfix to merge this into one single Authentication-Results:-Line?

When I send an e-mail to google, it says:

       spf=pass ( domain of designates as permitted sender);
       dmarc=pass (p=NONE dis=NONE)

And this is exactly what I want. Just one Authentication-Results-Header. How can I do this?




share|improve this question
You'd probably be best doing this via a milter, or an external script.. – NickW Jun 6 '14 at 10:29

If you want to use postfix header_checks feature to handle your case, then the header_checks can't do that. Header checks only process header line by line until body parts.

As @NickW said, you should use milter / or external script with content filter. Of course that special milter must be placed in the bottom. With external script, you can add it via content_filter parameter.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.