VERP Sanity Check

[Sam Jones]

Good afternoon List Members,

I'm having a bit of a problem getting VERP to work on my multi-instance
Postfix. I'm probably missing a step.

I've checked I have PCRE available, and that they work. I've set up
everything as per http://www.postfix.org/VERP_README.html.

MAPS
/^(MAIL FROM:<.+@munged1\.co\.uk>.*)/ $1 XVERP
/^(MAIL FROM:<.+@munged2\.co\.uk>.*)/ $1 XVERP=+=

main.cf for outbound instance
#VERP
smtpd_command_filter = pcre:/etc/postfix-out/maps/append-verp.pcre
(not sure where in main.cf I put this, it's close to the top)

But when I test I get:

MAIL FROM command failed: Unsupported option: XVERP
and
MAIL FROM command failed: Unsupported option: XVERP=+=

With log lines like
outpostfix/smtpd[] . replacing command "MAIL
FROM:" with "MAIL FROM:" with "MAIL FROM:

Re: VERP Sanity Check

[Viktor Dukhovni]

On Fri, Dec 21, 2012 at 04:12:11PM +, Sam Jones wrote:

> I've checked I have PCRE available, and that they work. I've set up
> everything as per http://www.postfix.org/VERP_README.html.

See: http://www.postfix.org/VERP_README.html#config

You likely forgot to set:

smtpd_authorized_verp_clients

or else the legacy equivalent:

authorized_verp_clients

> MAPS
> /^(MAIL FROM:<.+@munged1\.co\.uk>.*)/ $1 XVERP
> /^(MAIL FROM:<.+@munged2\.co\.uk>.*)/ $1 XVERP=+=

Coercing XVERP globally is only safe if all clients permitted
to use your SMTP server should be allowed to use XVERP.

-- 
Viktor.

Re: [Bulk] Re: VERP Sanity Check

[Sam Jones]

Thank you Viktor - that is exactly it. I assumed it was an option but
when I read further that was incorrect.

It is now working just as intended. Thank you very much for taking the
time to look at my post and reply. I am very grateful for your time.

Kind regards and happy holidays.
Sam

On Fri, 2012-12-21 at 16:19 +, Viktor Dukhovni wrote:
> On Fri, Dec 21, 2012 at 04:12:11PM +, Sam Jones wrote:
> 
> > I've checked I have PCRE available, and that they work. I've set up
> > everything as per http://www.postfix.org/VERP_README.html.
> 
> See: http://www.postfix.org/VERP_README.html#config
> 
> You likely forgot to set:
> 
>   smtpd_authorized_verp_clients
> 
> or else the legacy equivalent:
> 
>   authorized_verp_clients
> 
> > MAPS
> > /^(MAIL FROM:<.+@munged1\.co\.uk>.*)/ $1 XVERP
> > /^(MAIL FROM:<.+@munged2\.co\.uk>.*)/ $1 XVERP=+=
> 
> Coercing XVERP globally is only safe if all clients permitted
> to use your SMTP server should be allowed to use XVERP.
>