Rspamd: [BUG] ARC Check fail after i=2

[mguesdon]

Prerequisites

• [X] Put an X between the brackets on this line if you have done all of the following:

Describe the bug

ARC check always fail after i=2.

Steps to Reproduce

Configure rspamd as milter.
Configure postfix master to loop:
smtp inet n - n - - smtpd
-o smtpd_authorized_xforward_hosts=127.0.0.0/8,81.201.189.161
-o content_filter=smtp-filt:81.201.189.161:10040
-o smtp_bind_address=81.201.189.161

smtps inet n - n - - smtpd
-o smtpd_authorized_xforward_hosts=127.0.0.0/8,81.201.189.161
-o smtpd_tls_wrappermode=yes
-o content_filter=smtp-filt:81.201.189.161:10040
-o smtp_bind_address=81.201.189.161

81.201.189.161:10040 inet n - n - - smtpd
-o content_filter=smtp-filt:81.201.189.161:10041
-o non_smtpd_milters=
-o mynetworks=127.0.0.0/8,81.201.189.161/32
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtp_send_xforward_command=yes
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_relay_restrictions=permit_mynetworks,reject
-o smtpd_authorized_xforward_hosts=127.0.0.0/8,81.201.189.161
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks

81.201.189.161:10041 inet n - n - - smtpd
-o content_filter=smtp-filt:81.201.189.161:10042
-o non_smtpd_milters=
-o mynetworks=127.0.0.0/8,81.201.189.161/32
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtp_send_xforward_command=yes
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_relay_restrictions=permit_mynetworks,reject
-o smtpd_authorized_xforward_hosts=127.0.0.0/8,81.201.189.161
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks

81.201.189.161:10042 inet n - n - - smtpd
-o non_smtpd_milters=
-o mynetworks=127.0.0.0/8,81.201.189.161/32
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtp_send_xforward_command=yes
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_relay_restrictions=permit_mynetworks,reject
-o smtpd_authorized_xforward_hosts=127.0.0.0/8,81.201.189.161
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks

Filt Filter Transport

smtp-filt unix - - n - - smtp
-o smtp_send_xforward_command=yes
-o smtp_bind_address=81.201.189.161

Configure rspamd to only do "ARC_CALLBACK" and "ARC_SIGNED":
amavisback {
priority = high;
id = "amavisback";
ip = "81.201.0.0/16";
apply {
enable_groups = ["arc"];
symbols_enabled = ["ARC_CALLBACK","ARC_SIGNED"];
}
# Always add these symbols when settings rule has matched
symbols [ "CONTENT_FILTER_BACK" ];
}

in arc.conf:
auth_only = false;
allow_username_mismatch = true;
sign_inbound =true;

use_domain_custom =< return function(task)
return 'oxymium.net'
end
EOD;

check_pubkey = true;

path = "/etc/oxymium/arc/arc-2019.oxymium.key";
selector = "arc-2019.oxymium";

Send an email. For exemple from another host:
mail -s "PLOC136" -r [email protected] [email protected]
(our rspam host is a mx for tests.oxymium.mobi).

Expected behavior

ARC Check should always be OK.

Versions

rspamd-1.9.3-2.x86_64 on CentOS.

Additional Information

Final received mail and rspamd logs in attached files
rspamd.log
16237.txt

Before someone ask the question "why the hell do you do such loop ?": I work on mails which are rerouted and pass multiple hosts.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[mguesdon]

But it's a real bug :-(

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[mguesdon]

But it's a real bug :-(

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.