I have been using Skelleton‘s guide1 to setup opendmarc on some mail server I am building.
My problem is the version of opendmarc that comes with Debian is 1.3.0 and this version has a bug2 which fails to honor the IgnoreAuthenticatedClients directive.
This is an attempt to build3 the newest version, 1.3.1, for Debian jessie.
Prepare the environment
- Install all necessary packages:
$ sudo apt -y install pbuilder debootstrap devscripts packaging-dev debian-keyring - Prepare a Debian jessie build environment:
$ sudo pbuilder create --debootstrapopts --variant=buildd --mirror http://ftp.us.debian.org/debian/ --distribution jessie --architecture amd64 --components main --debbuildopts -mJohn Doe \<john .doe@example.net\>
Prepare the Debian environment for opendmarc 1.3.1
- Download and extract the package:
$ wget http://downloads.sourceforge.net/project/opendmarc/opendmarc-1.3.1.tar.gz $ tar xvzf opendmarc-1.3.1.tar.gz $ cd opendmarc-1.3.1/ - Prepare for Debian packaging:
$ DEBFULLNAME="John Doe" DEBEMAIL="john.doe@example.net" dh_make -s -y --createorig- Rename the debian folder:
$ mv debian debian.orig
- Rename the debian folder:
- Shamelessly copy *debian/** from the original:
$ cd /tmp/ $ apt-get source opendmarc $ cd opendmarc-1.3.1+dfsg/ $ cp -a debian/ ~/opendmarc-1.3.1 - Optional steps:
- Change the Author name to yours in debian/control
-
Restore the debian/changelog file:
$ cp debian.orig/changelog debian/ - Get rid of the debian.orig folder:
$ mv debian.orig/ .. - Edit the debian/changelog file with
dch -e:opendmarc (1.3.1-1) unstable; urgency=medium<br /> * Initial release: To fix the IgnoreAuthenticatedClients issue: http://www.trusteddomain.org/pipermail/opendmarc-users/2016-April/000636.html -- John Doe </john><john .doe@example.net> Fri, 29 Apr 2016 13:43:22 +0300
Build opendmarc 1.3.1
- Run pdebuild:
$ pdebuild - You cab find the resultant debs under /var/cache/pbuilder/result/:
$ ls -la /var/cache/pbuilder/result/ total 868 drwxr-xr-x 2 root root 4096 Απρ 29 13:54 . drwxr-xr-x 8 root root 4096 Απρ 29 12:56 .. -rw-r--r-- 1 theodotos theodotos 38534 Απρ 29 13:54 libopendmarc2_1.3.1-1_amd64.deb -rw-r--r-- 1 theodotos theodotos 64210 Απρ 29 13:54 libopendmarc-dev_1.3.1-1_amd64.deb -rw-r--r-- 1 theodotos theodotos 2348 Απρ 29 13:54 opendmarc_1.3.1-1_amd64.changes -rw-r--r-- 1 theodotos theodotos 75890 Απρ 29 13:54 opendmarc_1.3.1-1_amd64.deb -rw-rw-r-- 1 theodotos theodotos 846 Απρ 29 13:54 opendmarc_1.3.1-1.dsc -rw-r--r-- 1 theodotos theodotos 663859 Απρ 29 13:54 opendmarc_1.3.1-1.tar.gz -rw-r--r-- 1 theodotos theodotos 17136 Απρ 29 13:54 rddmarc_1.3.1-1_all.deb
You can now copy the debs over your mail server and test them.
Update: I did this before I had discovered that opendmarc 1.3.1 is in Debian jessie backports4. But an interesting drill nevertheless.
References
- https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/ ↩︎
- http://www.trusteddomain.org/pipermail/opendmarc-users/2016-April/000636.html ↩︎
- http://www.theo-andreou.org/?p=1145 ↩︎
- http://www.trusteddomain.org/pipermail/opendmarc-users/2016-April/000641.html</john> ↩︎