> -----Original Message----- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of Steve Fatula > Sent: Tuesday, August 09, 2011 11:12 AM > To: Postfix Users > Subject: Postscreen, SPF and DKIM? > > However, it is good practice to reject mail that fails spf or dkim > tests, since theoretically it is forged. And if it isn't then, the > sender will be made aware that they have an error in their setup. It > would be better to reject these before they ever get to the smtp > server, would it not? Seems like this would be a function, if fast > enough, that would fit the intended use of postscreen.
Postfix architecture aside, I think this is bad advice, at least about DKIM. The premises are false.
