[Pymilter] Pymilter SPF not working out of the box

[Sergiu Ivasenco]

Dear Pymilter maintainers,

I am getting the following error when trying to start pyspf-milter service (command: systemctl start pyspf-milter) unless I apply a hack marked as 'spf-engine fixes' in my Dockerfile:

[cid:image001.png at 01DA0B3C.15A9BE00]

Please see a summary of my Dockerfile below

FROM rockylinux:9.2

#......

RUN yum update -y && yum upgrade -y && yum install -y epel-release && yum update -y

RUN yum config-manager --set-enabled crb && yum update -y && yum upgrade -y

RUN yum install -y python3 python3-pip python3-devel sendmail-devel wget telnet gcc

RUN yum install -y postfix

RUN adduser --system -s /bin/false --user-group --no-create-home pyspf-milter

RUN python3 -m pip install authres py3DNS python-spf flit milter pyspf pymilter spf-engine

#...


#####   spf-engine fixes
###  RUN cp -fv /usr/local/lib/python3.9/site-packages/spf.py /usr/local/lib/python3.9/site-packages/spf/__init__.py
##################

COPY main.cf /etc/postfix/main.cf
COPY master.cf /etc/postfix/master.cf
COPY policyd-spf.conf /etc/python-policyd-spf/policyd-spf.conf
COPY opendkim.conf /etc/opendkim.conf
COPY TrustedHosts /etc/opendkim/TrustedHosts

COPY init.sh /opt/init.sh

CMD ["sh", "/opt/init.sh"]

The fact that I need to overwrite files inside site-packages makes me feel that there is something wrong with my setup, but I am not sure what since my expectation is that installed packages should work out-of-the-box.

Would you be able to help me, please, clarify what am I doing wrong and what is the recommended setup?


Also, would it be possible adding me to the mailing list so I can see the reply?

Thank you,
Sergiu

Sergiu Ivasenco | Software Architect
E: ivasenco at echoworx.com<mailto:%20ivasenco at echoworx.com>

Echoworx<https://www.echoworx.com> | It Pays To Be Secure
4101 Yonge Street, Suite 708, Toronto, ON, Canada M2P 1N6
Follow us on LinkedIn<https://www.linkedin.com/company/echoworx>

[Join us for an insightful webinar on SOC2 compliance. Practical insights, no jargon. This is a must-attend event for CISOs and IT Managers. Register now.] <https://www.echoworx.com/emailsignature/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gathman.org/pipermail/pymilter/attachments/20231030/2007b788/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 30611 bytes
Desc: image001.png
URL: <http://gathman.org/pipermail/pymilter/attachments/20231030/2007b788/attachment-0001.png>