So to be clear SPF and DKIM milters have the ability to add headers, then the MDA can make a decision on *that* header - I don't want any more processing based on headers, sender and recipient as the whole shebang prior to the MDA was supposed to take care of the most critical part - was it SPF and/or DKIM compliant and if so, add the friggin' header so the MDA can decide on that and only that element.

Am I right here?

On 06/26/2016 11:37 PM, Peter wrote:
On 27/06/16 08:44, Chip wrote:
John Doe receives email at john...@abc.com.

He is ONLY to receive email that is fully DKIM and/or SPF compliant from
anyone at the xyz.com company.
[Summary: the rest would go to another folder]

This is fairly simple to do, but does require some external components
to Postfix.  There are two main components to this, flagging and delivery.

For flagging you'll need your SPF and DKIM milters to add headers
showing pass/fail to the message, the various milters that are available
should be able to do this.

For delivery you'll need a 3rd party MDA.  I would recommend using
Dovecot LMTP with the sieve (pigeonhole) plugin.  This will allow you to
deliver the mail to alternate IMAP folders dependant on the message
headers, sender and recipient info, etc.  So you could route any message
that have been flagged by the SPF or DKIM milter to a different folder.
  Likewise with messages that do not match the sender domain you are
expecting.


Peter



Reply via email to