5 votes

What difference does it make to implement a feature as policy service vs as milter in Postfix?

For most purposes, including basic message authentication checks (SPF, DMARC, BIMI, ..), either interface is suitable. For content checking (blocking unwanted attachment), signatures (DKIM, ARC) and ...
anx's user avatar
  • 9,783
4 votes

How to get spamassassin working with postfix as a milter

TLDR: Your postfix is connecting to socket of spamd, but should connect to socket of spamass-milter, which stands in between. Look for definition of second socket in your spamass-milter configuration/...
Aleksejs Spiridonovs's user avatar
3 votes

spamass-milter[1403]: Could not retrieve sendmail macro "i"!. Please add it to confMILTER_MACROS_ENVFROM for better spamassassin results

Your milter expects a property of Sendmail which is not true for Postfix. As documented in the macro section of the postfix milter readme, the milter macro i provides the queue identifier, which is ...
anx's user avatar
  • 9,783
3 votes
Accepted

Postfix rejecting mail when milter is down - is it possible to let the emails throu anyway?

I think the answer is yes, with the option "milter_default_action = accept". I prefer to use "milter_default_action = tempfail", so the mail will come back later, in case of milter failure. http://...
Dom's user avatar
  • 6,793
2 votes

Postfix + Python MIlter

Postfix probably runs in a chrooot environment. Then you would have to put the socket in a place like this: /var/spool/postfix/var/run/pythonsock Then also make sure that the permissions are correct....
Alexander's user avatar
  • 277
2 votes
Accepted

Postfix milter - Is there a transport security?

postfix should be (and by default in all distros i know, is) setup in a way such that every socket is only accessible by postfix and the respective milter. While some *nix systems do not implement ...
anx's user avatar
  • 9,783
2 votes
Accepted

Postfix not triggering OpenDKIM milter

This is actually really embarrassing... The non_smtpd_milters directive was written with a typo (as you can see in the question above): non_smptd_milters = unix:/opendkim/opendkim.sock I wrote ...
thisguyheisaguy's user avatar
2 votes
Accepted

Can postfix queue message till milter comes back?

The answer is yes if you have a Postfix 2.6, else you can only accept or temporaly reject the mail if the milter is down. If it is accepted, you will not go to the milter after the mail is putting in ...
Dom's user avatar
  • 6,793
2 votes
Accepted

Postfix client cert info not being passed to opendkim milter

Because you only accept authenticated mail anyway, you do not need to pass information about which method was used to opendkim - only the (boolean) distinction between ports that have mandatory ...
anx's user avatar
  • 9,783
2 votes

opendkim no signing table match for no signature data

Assuming that your SigningTable contains wildcards (e.g. *@mydomain.com , where * to match all users is a wildcard), you should prefix it with refile: in the opendkim.conf file, like this: ...
bronekk's user avatar
  • 121
2 votes
Accepted

Why does all email, including email that is rejected, get processed by the milter?

It's basically answered in the MILTER README, but you need to understand what Milter is. For every protocol command, Postfix runs is own checks available so far, and if the verdict is not "reject&...
Nikita Kipriyanov's user avatar
2 votes
Accepted

opendkim milter not launching on proper server socket

While that is the path where the socket lies on the system, that is not the path chrooted smtpd instances will see it at: smtpd_milters = local:/var/spool/postfix/opendkim/opendkim.sock Postfix smtpd ...
anx's user avatar
  • 9,783
1 vote

How to bypass postfix milters for certain users?

No and this is impossible in principle; this is not specific to Postfix. Milter is basically a collection of functions that are called on corresponding stages of SMTP session: one is called when ...
Nikita Kipriyanov's user avatar
1 vote

Can't get Sendmail to connect to MIMEDefang

After staring at the service status very closely I noticed the problem. If you look at the command listed in the status in the question it looks like this: -U defang -s -p /var/spool/MIMEDefang/...
Fr33dan's user avatar
  • 171
1 vote

Opendkim fails to start on CentOS 7 (connect to Milter service inet:localhost:8891: Connection refused)

I also faced same issue - couldn't start opendkim, and re-installation might not be an option for all. So adding my solution. In my case, "TrustedHosts were" missing from "/etc/opendkim/" /etc/...
cupid's user avatar
  • 11
1 vote
Accepted

How can I customize before-queue milter replies in Postfix?

This can be customized in the milter. spamass-milter version 0.4.0, the latest release from 2014 added two options to override the response for messages it rejects: -C rejectcode Mail that is ...
anx's user avatar
  • 9,783
1 vote
Accepted

Capture queue ID and 250 OK via milter

Simply use an address as the envelope sender that is actually monitored. Do it like this: make sure bounces@$yourdomain is delivered into a program (i.e. maybe via aliases or .forward) change your ...
Ralf Hildebrandt's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible