policyd-spf skip_addresses not IP network

May 28 18:52:53 server policyd-spf[12368]: ERROR: 127.0.0.0/8 in skip_addresses not IP network.  Message: '65.54.190.90' does not appear to be an IPv4 or IPv6 address. Did you pass in a bytes (str in Python 2) instead of a unicode object?. Aborting whitelist processing.

Fix...

yum install -y python34
sed -i "s|/usr/bin/python|/usr/bin/python3|" /etc/postfix/master.cf
/bin/systemctl restart postfix

Bye

When I follow this I get an error as follows

Code: [Select]

Traceback (most recent call last):
  File "/usr/libexec/postfix/policyd-spf", line 35, in <module>
    import spf
ImportError: No module named 'spf'

(As a work around until I get this fixed in master.cf I use: user=nobody argv=/usr/bin/python /usr/libexec/postfix/policyd-spf
instead of: user=nobody argv=/usr/bin/python3 /usr/libexec/postfix/policyd-spf

Also I have to disable the ipaddress modules in python. While this causes other problems the server can at least receive mails)

Solved this by:

1) installing pip for python 3 following this: https://stackoverflow.com/questions/32618686/how-to-install-pip-in-centos-7

2) then seeing what modules were missing by invoking the script from ssh with

Code: [Select]

sudo -u nobody /usr/bin/python3.4 /usr/libexec/postfix/policyd-spf     I added the following:
2a) module spf with

Code: [Select]

pip3 install pyspf2b) module dns with

Code: [Select]

pip3 install py3dns2c) module policydspfsupp with

Code: [Select]

pip3 install pypolicyd-spf
3) then changed back to python3 (as per the original solution above) in /etc/postfix/master.cf

Code: [Select]

user=nobody argv=/usr/bin/python3 /usr/libexec/postfix/policyd-spf
4) restarted postfix

Solved this by:

1) installing pip for python 3 following this: https://stackoverflow.com/questions/32618686/how-to-install-pip-in-centos-7

2) then seeing what modules were missing by invoking the script from ssh with

Code: [Select]

sudo -u nobody /usr/bin/python3.4 /usr/libexec/postfix/policyd-spf     I added the following:
2a) module spf with

Code: [Select]

pip3 install pyspf2b) module dns with

Code: [Select]

pip3 install py3dns2c) module policydspfsupp with

Code: [Select]

pip3 install pypolicyd-spf
3) then changed back to python3 (as per the original solution above) in /etc/postfix/master.cf

Code: [Select]

user=nobody argv=/usr/bin/python3 /usr/libexec/postfix/policyd-spf
4) restarted postfix

thx!!! works perfect.

Will it be included in official CWP ??

this is related with centos 7.4 only for now, you can also disable spf check by removing check_policy_service unix:private/spfpolicy from line smtpd_recipient_restrictions = in file /etc/postfix/main.cf

this will disable spf check and you could get more spam.
CWP default mail server rebuild has that already as temporary fix and soon there should release a new cwp mail server with additional options.

But Can I apply this fix or it will conflict with feauters cwp ??
How CWP plan to fix this issue ?

Any ETA for a permanent fix for this issue?

Quite annoying not being able to use SPF/DKIM and implementing a temporary fix that might give trouble ahead, does not seem to be a good choice....