> -----Original Message-----
> From: owner-postfix-us...@postfix.org 
> [mailto:owner-postfix-us...@postfix.org] On Behalf Of Steve Fatula
> Sent: Tuesday, August 09, 2011 11:12 AM
> To: Postfix Users
> Subject: Postscreen, SPF and DKIM?
> 
> However, it is good practice to reject mail that fails spf or dkim
> tests, since theoretically it is forged. And if it isn't then, the
> sender will be made aware that they have an error in their setup. It
> would be better to reject these before they ever get to the smtp
> server, would it not? Seems like this would be a function, if fast
> enough, that would fit the intended use of postscreen.

Postfix architecture aside, I think this is bad advice, at least about DKIM.  
The premises are false.

Reply via email to