On 01-11-2024 01:00, Adriel via Postfix-users wrote:
Hello,
I have policyd-spf and opendkim (as a milter) installed for postfix.
How can I customize the policy that, if an incoming message has SPF
failed AND has invalid DKIM then this message will be rejected? AFAIK
google has this kind of rejection policy for their gmail.
I know that in opendkim.conf and policyd-spf.conf I can setup the
policy for rejection. But the two files are separated.
I use rspamd, if you already have that in use maybe it is just as easy.
The "DMARC_POLICY_REJECT" sybol is triggered if dmarc fails.
I have the score set to the reject value.
In most cases these mails have plenty of other points to make it score
way above reject threshold, even if there are some negative scores also,
and is therefore rejected.
Want to be extra certain? Just increase the score.
I suspect that this setup may increase the number of cpu cycles used,
compared to a simple reject, but that is no issue for me, since I have a
low volume.
:-)
Danjel
Thanks.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
--
Med venlig hilsen/Kind regards
Danjel Jungersen
Mail: dan...@jungersen.dk
Mobile: +45 20 42 20 11
Jungersen Grafisk ApS,
Holsbjergvej 39, DK-2620 Albertslund,
Denmark.
Tel: +45 43 64 10 00
WEBSHOP: PRINTLIGHT.DK <https://www.printlight.dk> | WWW.JUNGERSEN.DK
<https://www.jungersen.dk>
Logo <https://www.jungersen.dk>
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
