Re: Multi-domain DKIM signature with OpenSMTPd

2020-03-20 Thread Matthieu

Le 20/03/2020 à 23:25, Stuart Henderson a écrit :

On 2020-03-18, Matthieu  wrote:

Hi everybody
I'm looking to use OpenDKIM with OpenSMTPd. Has anyone ever done it
before ?
My first intention is to sign mails from different domains on a single
mail server. So the

OpenDKIM works with a socket and I don't know how and if it works with
the smptd filter.
I've seen the «opensmptd-filter-dkimsign» packet, but we can only
specify one domaine.

Otherwise I'd be looking at the side of dkimproxy if it can do the job
or not.

Thx for any help.




You should be able to do this with rspamd + opensmtpd-filter-rspamd ..



Thx Stuart,
It solved with dkimproxy finally.



Re: Multi-domain DKIM signature with OpenSMTPd

2020-03-20 Thread Stuart Henderson
On 2020-03-18, Matthieu  wrote:
> Hi everybody
> I'm looking to use OpenDKIM with OpenSMTPd. Has anyone ever done it 
> before ?
> My first intention is to sign mails from different domains on a single 
> mail server. So the
>
> OpenDKIM works with a socket and I don't know how and if it works with 
> the smptd filter.
> I've seen the «opensmptd-filter-dkimsign» packet, but we can only 
> specify one domaine.
>
> Otherwise I'd be looking at the side of dkimproxy if it can do the job 
> or not.
>
> Thx for any help.
>
>

You should be able to do this with rspamd + opensmtpd-filter-rspamd ..



Re: How to test for FORTIFY_SOURCE?

2020-03-20 Thread Ingo Schwarze
Hi Luke,

Luke A. Call wrote on Wed, Mar 18, 2020 at 12:54:10PM -0600:
> On 03-18 19:22, Ingo Schwarze wrote:
>> Theo de Raadt wrote:

>>> Ingo -- I think using man.openbsd.org as a "testbed for all possible
>>> man page hierarchies" incorrect.

>> It was never a testbed, but a production service with several parts
>> provided nowhere else (well, at least until FreeBSD followed our
>> lead and started providing something very similar).
>> 
>> For example, for DragonFly, Illumos, and NetBSD, semantic searching
>> is neither supported by their native apropos(1) on the command line
>> nor by their own websites.
>> 
>> But since you have a point that such services hardly belong
>> on *.openbsd.org, they are now on *.bsd.lv, where misunderstandings
>> like the one witnessed above are unlikely to happen.

> Providing a simple link from the man.openbsd.org page to the services
> on *.bsd.lv might help those who are used to looking in the old
> location, while avoiding possible "which bsd" confusion (maybe called 
> "Some other systems' manuals", or such).  Especially for those not
> reading this thread.  Just a thought.

Makes sense, done.

Note that in addition to man.openbsd.org, man.bsd.lv is now also
up and running, but the latter will only contain release manual
pages for a number of systems (including OpenBSD) but not
OpenBSD-current.

Yours,
  Ingo



dn_skipname() not docoumented?

2020-03-20 Thread Claus Assmann
Is there no man page for dn_skipname() on purpose or is it an
oversight?

I found it on FreeBSD:

RESOLVER(3)FreeBSD Library Functions ManualRESOLVER(3)
 int
 dn_skipname(const u_char *comp_dn, const u_char *eom);
DESCRIPTION
 The dn_skipname() function skips over a compressed domain name, which
 starts at a location pointed to by comp_dn.  The compressed name is
 contained in a query or reply message; eom is a pointer to the end of the
 message.  The size of compressed name is returned or -1 if there was an
 error.