config option Header_Type AR crashes

[Tomasz Sowa]

Hi

Operating system:
# uname -sr
FreeBSD 8.3-STABLE

smtp daemons:
# pkg_info | grep "postfix"
postfix-2.9.1,1 A secure alternative to widely-used Sendmail
py26-postfix-policyd-spf-python-1.0 Pure Python Postfix policy daemon for SPF checking

python:
# pkg_info | grep py
py26-dns-2.3.6 DNS (Domain Name Service) library for Python
py26-libxml2-2.7.8_2 Python interface for XML parser library for GNOME
py26-postfix-policyd-spf-python-1.0 Pure Python Postfix policy daemon for SPF checking
py26-pygments-1.4 A syntax highlighter written in Python
py26-setuptools-0.6c11_3 Download, build, install, upgrade, and uninstall Python pac
py26-spf-2.0.7 Python implementation of the RFC 4408 SPF protocol
py26-subversion-1.7.3 Python bindings for version control system
python26-2.6.8_3 An interpreted object-oriented programming language

Header_Type enabled in the config to RFC 5451 Authentication Results (AR):
# grep Header_Type /usr/local/etc/postfix-policyd-spf-python/policyd-spf.conf
Header_Type = AR

trying to send a message from a remote server (@gmail.com) to me (@slimaczek.pl):

May 4 00:02:19 slimaczek policyd-spf[18524]: Config: {'Mail_From_reject': 'Softfail', 'PermError_reject': 'False', 'HELO_reject': 'SPF_Not_Pass', 'Header_Type': 'AR', 'defaultSeedOnly': 1, 'debugLevel': 5, 'skip_addresses': '127.0.0.0/8,::ffff:127.0.0.0//104,::1//128', 'TempError_Defer': 'False'}
May 4 00:02:19 slimaczek policyd-spf[18524]: Cached data for this instance: []
May 4 00:02:19 slimaczek policyd-spf[18524]: spfcheck: pyspf result: "['None', '', 'helo']"
May 4 00:02:19 slimaczek policyd-spf[18524]: None; identity=helo; client-ip=74.125.83.42; helo=mail-ee0-f42.google.com; <email address hidden>; <email address hidden>
May 4 00:02:19 slimaczek policyd-spf[18524]: Traceback (most recent call last):
May 4 00:02:19 slimaczek policyd-spf[18524]: File "/usr/local/bin/policyd-spf", line 684, in <module>
May 4 00:02:19 slimaczek policyd-spf[18524]: instance_dict, configData, peruser)
May 4 00:02:19 slimaczek policyd-spf[18524]: File "/usr/local/bin/policyd-spf", line 462, in _spfcheck
May 4 00:02:19 slimaczek policyd-spf[18524]: header += str(authres.AuthenticationResultsHeader(authserv_id = configData.get('Authserv_Id'),
May 4 00:02:19 slimaczek policyd-spf[18524]: NameError: global name 'authres' is not defined
May 4 00:02:19 slimaczek postfix/spawn[18521]: warning: command /usr/local/bin/python2.6 exit status 1
May 4 00:02:19 slimaczek postfix/smtpd[18516]: warning: premature end-of-input on private/policyd-spf while reading input attribute name
May 4 00:02:19 slimaczek postfix/smtpd[18516]: warning: problem talking to server private/policyd-spf: No error: 0
May 4 00:02:19 slimaczek postfix/smtpd[18516]: NOQUEUE: reject: RCPT from mail-ee0-f42.google.com[74.125.83.42]: 451 4.3.5 Server configuration problem; from=<email address hidden> to=<email address hidden> proto=ESMTP helo=<mail-ee0-f42.google.com>
May 4 00:02:19 slimaczek postfix/smtpd[18516]: disconnect from mail-ee0-f42.google.com[74.125.83.42]

If more info is needed then let me know.

--
Tomek

[Scott Kitterman (kitterman)]

Did you install the authres module? The error is telling you it's not there and I don't see it listed as installed. I searched the FreeBSD ports tree and I don't see that it's been packaged. You can find it at https://pypi.python.org/pypi/authres

[Tomasz Sowa (t-sowa-p)]

After installing https://pypi.python.org/pypi/authres pypolicyd-spf seems to work properly.

FreeBSD needs a new port: http://www.freebsd.org/cgi/query-pr.cgi?pr=177824
when the port will be ready make sure the correct dependencies are set.

Thanks.

--
Tomek

[Scott Kitterman (kitterman)]

Ports integration issue, not an upstream bug.

[Scott Kitterman (kitterman)]

FYI, authres is in ports and it's now required, so this issue is solve in ports:

http://svnweb.freebsd.org/ports/head/mail/postfix-policyd-spf-python/Makefile?view=markup&pathrev=325529