Hello, Same issue here but I found a workaround.
I defined inet in /etc/default/opendmarc but it's not readed anymore by opendmarc systemd unit. cat /etc/default/opendmarc # Command-line options specified here will override the contents of # /etc/opendmarc.conf. See opendmarc(8) for a complete list of options. #DAEMON_OPTS="" # # Uncomment to specify an alternate socket # Note that setting this will override any Socket value in opendkim.conf #SOCKET="local:/var/run/opendmarc/opendmarc.sock" # default #SOCKET="inet:54321" # listen on all interfaces on port 54321 #SOCKET="inet:12345@localhost" # listen on loopback on port 12345 #SOCKET="inet:12345@192.0.2.1" # listen on 192.0.2.1 on port 12345 SOCKET="inet:10028@127.0.0.1" I readed in /usr/share/doc/opendmarc/README.Debian this information: Users may also need to move the socket into a directory accessible by the Postfix chroot; this can be accomplished by setting the SOCKET variable in /etc/systemd/system/opendmarc.service.d/overrride.conf (if systemd is used) or in /etc/default/opendmarc (if SysV is used). Alternately, it can be set in the installed configuration file, /etc/opendmarc.conf. We used systemd in Debian now.. but this file is not present. The file should be generated by the /lib/opendmarc/opendmarc.service.generate provided by opendmarc package. I think it's not executed in the upgrade action.. @Scott <https://bugs.debian.org/cgi-bin/pkgreport.cgi?maint=scott%40kitterman.com> could you please check this for us? Workaround: execute this commands manually to solve the problem: # bash /lib/opendmarc/opendmarc.service.generate # systemctl daemon-reload # systemctl restart opendmarc.service Br, -- FĂ©lix Defrance PGP: 0x0F04DC57