PGNet Dev:
> Two questions:
> 
> (1) my postfix config includes,
> 
>       strict_rfc821_envelopes = yes
> 
> the FROM: & RCPT TO: addressed i inject, as well as those in the originally 
> sent mail, appear to be compliant.
> 
> is there _more_ that strict restriction that might be relevant?

Postfix would have logged any hostile actions..

> (2) currently, the opendmarc milter here is launched as a 'simple' 
> non-forking/foreground systemd service

I don't expect that the forking model would make a difference
for how DMARC etc. policy is evaluated.

> Initially, I see no difference. At least not with the XCLIENT
> injection tests.
>
> For milter use, in postfix, is there any preference/requirement
> for the milters to exec in forked vs. un-forked mode?

Postfix does not care. If forked versus non-forked would change the
bits that the milter receives or sends, then that would be a defect
on the milter side (it can happen when they fork in the middle of
a postfix-milter conversation that is already in progress, but the
cole is old enough that it would be unlikely).

        Wietse

Reply via email to