Patrick Ben Koetter via Postfix-users skrev den 2025-01-14 13:46:
* natan via Postfix-users <na...@epf.pl>:
Hi
What is currently happening with the OpenArc project? On GitHub, I see
the
last modifications were made 7 years ago. Has the project completely
failed?
I'm asking because I see that Gmail/G-Suite are using it, and, after
all,
they are trendsetters. The OpenARC project seems quite useful and is
relatively easy to implement with Postfix and milters or probbaly
others
3party software. I'm asking because I have OpenARC running on one
instance
and I'm wondering what to do next.
Use it while you can. It will very likely go away within the next 3
years and
it will be replaced by something even more complicated… ;-)
But seriously: It's not worth the hassle unless you run a mailing list
or so.
But even then ARC will very likely be replaced.
lol :)
strip down rspamd to service ARC only, as a policy bank, job done
in postfix please do:
port 25: do ARC-verify, clamav, and possible more before breaking dkim
port 465, 587: do dkim sign only if originating email, this should not
include maillists
after all this its safe to break dkim in maillists, since originating
state is trackleble from ARC
i belive no one do this since it needs to have ARC-Signer AR trusted
i do use AuthRes in spamassassin with good results
maybe do an ARC-* in perl, should not be very hard to make that milter,
all needed is just the perl milter
sadly sys4.de breaks dkim long before rspamd have done arc-signed,
arc-sealed with the state from port 25 incomming non originating, so it
will never work
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org