From fe51b595447f42f36cfe62cd12b8dc91b68995dc Mon Sep 17 00:00:00 2001
From: mhoellein <mario@hoellein.online>
Date: Thu, 20 Jun 2019 13:38:14 +0200
Subject: [PATCH] committing changes in /etc after apt run

Package changes:
+postfix-policyd-spf-python 2.0.2-1 all
+python3-authres 1.0.2-1 all
+python3-dns 3.1.1-1 all
+python3-spf 2.0.12t-3 all
---
 .etckeeper                                          |  3 +++
 group                                               |  1 +
 group-                                              |  1 +
 gshadow                                             |  1 +
 gshadow-                                            |  1 +
 logcheck/ignore.d.server/postfix-policyd-spf-python |  2 ++
 passwd                                              |  1 +
 passwd-                                             |  1 +
 postfix-policyd-spf-python/policyd-spf.conf         | 13 +++++++++++++
 shadow                                              |  1 +
 shadow-                                             |  1 +
 11 files changed, 26 insertions(+)
 create mode 100644 logcheck/ignore.d.server/postfix-policyd-spf-python
 create mode 100644 postfix-policyd-spf-python/policyd-spf.conf

diff --git a/.etckeeper b/.etckeeper
index 1ce8e9506..8191883db 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -2137,6 +2137,7 @@ maybe chmod 0755 'logcheck/ignore.d.server'
 maybe chmod 0644 'logcheck/ignore.d.server/gpg-agent'
 maybe chmod 0644 'logcheck/ignore.d.server/libsasl2-modules'
 maybe chmod 0644 'logcheck/ignore.d.server/mysql-server-5_7'
+maybe chmod 0644 'logcheck/ignore.d.server/postfix-policyd-spf-python'
 maybe chmod 0644 'logcheck/ignore.d.server/razor'
 maybe chmod 0644 'logcheck/ignore.d.server/rsyslog'
 maybe chmod 0755 'logcheck/ignore.d.workstation'
@@ -2346,6 +2347,8 @@ maybe chmod 0755 'pm/sleep.d'
 maybe chmod 0755 'pm/sleep.d/10_grub-common'
 maybe chmod 0644 'popularity-contest.conf'
 maybe chmod 0755 'postfix'
+maybe chmod 0755 'postfix-policyd-spf-python'
+maybe chmod 0644 'postfix-policyd-spf-python/policyd-spf.conf'
 maybe chmod 0644 'postfix/dynamicmaps.cf'
 maybe chmod 0755 'postfix/dynamicmaps.cf.d'
 maybe chmod 0644 'postfix/main.cf'
diff --git a/group b/group
index 4877f36a2..dcc84b787 100644
--- a/group
+++ b/group
@@ -62,3 +62,4 @@ debian-spamd:x:121:
 bind:x:122:
 opendmarc:x:123:postfix
 serverbackup:x:1001:
+policyd-spf:x:124:
diff --git a/group- b/group-
index 6314b70d9..4877f36a2 100644
--- a/group-
+++ b/group-
@@ -61,3 +61,4 @@ amavis:x:120:postfix
 debian-spamd:x:121:
 bind:x:122:
 opendmarc:x:123:postfix
+serverbackup:x:1001:
diff --git a/gshadow b/gshadow
index 92512d9a1..ffe89dff8 100644
--- a/gshadow
+++ b/gshadow
@@ -62,3 +62,4 @@ debian-spamd:!::
 bind:!::
 opendmarc:!::postfix
 serverbackup:!::
+policyd-spf:!::
diff --git a/gshadow- b/gshadow-
index f6ecd0c90..92512d9a1 100644
--- a/gshadow-
+++ b/gshadow-
@@ -61,3 +61,4 @@ amavis:!::postfix
 debian-spamd:!::
 bind:!::
 opendmarc:!::postfix
+serverbackup:!::
diff --git a/logcheck/ignore.d.server/postfix-policyd-spf-python b/logcheck/ignore.d.server/postfix-policyd-spf-python
new file mode 100644
index 000000000..7abdccf14
--- /dev/null
+++ b/logcheck/ignore.d.server/postfix-policyd-spf-python
@@ -0,0 +1,2 @@
++^\w{3} [ :0-9]{11} [._[:alnum:]-]+ policyd-spf\[[0-9]+\]: (Pass|Neutral|None|Softfail|Fail|Temperror|Permerror); identity=(helo|mailfrom); client-ip=[0-9a-f.:]+; helo=.*; envelope-from=.*; receiver=
+
diff --git a/passwd b/passwd
index 64b876e05..dbab3a1d7 100644
--- a/passwd
+++ b/passwd
@@ -37,3 +37,4 @@ bind:x:116:122::/var/cache/bind:/usr/sbin/nologin
 opendmarc:x:117:123::/var/run/opendmarc:/usr/sbin/nologin
 serverbackup:x:1001:1001:backup:/home/serverbackup:/bin/bash
 strongswan:x:118:65534::/var/lib/strongswan:/usr/sbin/nologin
+policyd-spf:x:119:124::/nonexistent:/usr/sbin/nologin
diff --git a/passwd- b/passwd-
index 64b876e05..dbab3a1d7 100644
--- a/passwd-
+++ b/passwd-
@@ -37,3 +37,4 @@ bind:x:116:122::/var/cache/bind:/usr/sbin/nologin
 opendmarc:x:117:123::/var/run/opendmarc:/usr/sbin/nologin
 serverbackup:x:1001:1001:backup:/home/serverbackup:/bin/bash
 strongswan:x:118:65534::/var/lib/strongswan:/usr/sbin/nologin
+policyd-spf:x:119:124::/nonexistent:/usr/sbin/nologin
diff --git a/postfix-policyd-spf-python/policyd-spf.conf b/postfix-policyd-spf-python/policyd-spf.conf
new file mode 100644
index 000000000..4f53d9cff
--- /dev/null
+++ b/postfix-policyd-spf-python/policyd-spf.conf
@@ -0,0 +1,13 @@
+#  For a fully commented sample config file see policyd-spf.conf.commented
+
+debugLevel = 1 
+TestOnly = 1
+
+HELO_reject = Fail
+Mail_From_reject = Fail
+
+PermError_reject = False
+TempError_Defer = False
+
+skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0/104,::1
+
diff --git a/shadow b/shadow
index ade361f79..b732f1130 100644
--- a/shadow
+++ b/shadow
@@ -37,3 +37,4 @@ bind:*:17844:0:99999:7:::
 opendmarc:*:17846:0:99999:7:::
 serverbackup:!:17884:0:99999:7:::
 strongswan:*:17894:0:99999:7:::
+policyd-spf:*:18067:0:99999:7:::
diff --git a/shadow- b/shadow-
index ade361f79..b732f1130 100644
--- a/shadow-
+++ b/shadow-
@@ -37,3 +37,4 @@ bind:*:17844:0:99999:7:::
 opendmarc:*:17846:0:99999:7:::
 serverbackup:!:17884:0:99999:7:::
 strongswan:*:17894:0:99999:7:::
+policyd-spf:*:18067:0:99999:7:::
-- 
2.43.0