0

I am after suggestions on how to implement email sending of OpenDMARC-Reports. The problem I am having, is that (for obvious reasons), I have implemented SASL authentication on the smtpd server for all accounts. I have had a look at the OpenDMARC-Reports source code, and from what I can tell, the only authentication to the SMTP server it does is finding out the FQDN of the host it resides on. FYI, I have implemented SASL authentication via Dovecot, which in turn accesses MySQL for the email/user/password information.

Ideally, I would like to be able to either : a) use a linux service account (say OpenDMARC) to locally send out emails via a separate smtp route, or b) have OpenDMARC-Reports send resulting files to a file, then have an email client (say mutt) to handle the email transfers. (OpenDMARC-Reports does this, but it does not set the 'email sent' flag on the domains - only when it is emailing the report.)

Any suggestions welcome.

  • Did you possibly remove `permit_mynetworks` from your Postfix configuration when you were still using that to allow locally submitted messages without authentication? As long as your `ReportCommand` is unset or behaves like the default (`sendmail -t`), opendmarc can send mail without credentials just fine. – anx Sep 13 '22 at 16:01
  • permit_mynetworks is definitely in smtpd_sender_restrictions, smtpd_helo_restrictions, smtpd_recipient_restrictions and smtpd_relay_restrictions. The email gets as far as being submitted to the smtpd queue, where it promptly bounces because there is no authentication header to authenticate to an account on dovecot. Incidently, I can receive scheduled OpenDMARC reports from one of the domains I use for sending emails, as it doesn't have to tranverse via smtp. – Tom Thorp Sep 14 '22 at 13:11
  • For those interested, I have re-written OpenDMARC-Reports so that you have the option of SMTP authentication. I have written a blogpost on my website should anyone be interested in doing the same. https://tomthorp.me/blog/add-smtp-auth-opendmarc-reports – Tom Thorp Sep 23 '22 at 15:45

0 Answers0