Description of problem:

milter.if supports communication over unix sockets only.  Using tcp sockets creates avcs like

| type=1400 audit(1339325104.844:27): avc:  denied  { name_bind } for  pid=10277 comm="dkim-filter" src=10005 scontext=unconfined_u:system_r:dkim_milter_t:s0 tcontext=system_u:object_r:http_cache_port_t:s0 tclass=tcp_socket


For all my milters I wrote local rules like

---
type dkim_milter_port_t;
corenet_port(dkim_milter_port_t);

require {
	type dkim_milter_t;
	class tcp_socket { name_connect name_bind listen };
}

allow dkim_milter_t dkim_milter_port_t:tcp_socket { name_bind };
allow dkim_milter_t self:tcp_socket { listen accept };
---

Perhaps this can be generalized in milter.if?