Wietse Venema: > Steve Fatula: > > Yes, I do realize the more added to postscreen, the slower it gets, > > etc. However, one function that would seem to fit perfectly if > > it's not too slow would be spf and dkim checks. SPF we are doing > > Postscreen by design NEVER SEES THE ENVELOPE OR CONTENT of email > that is received by Postfix.
To clarify, postscreen attempts to answer one question: - Is the client a spambot? Postscreen is not concerned with this question: - Is this email message spam? Each approach has its merits, but the first one can eliminate most spam with the least effort, given that ~90% of email is spam, and that ~90% of spam is sent from botnets. Deciding if message is spam is much more difficult. Wietse > DKIM, on the other hand, requires computing a digital hash over the > header and body content. > > Wietse >