PGNet Dev: > Two questions: > > (1) my postfix config includes, > > strict_rfc821_envelopes = yes > > the FROM: & RCPT TO: addressed i inject, as well as those in the originally > sent mail, appear to be compliant. > > is there _more_ that strict restriction that might be relevant?
Postfix would have logged any hostile actions.. > (2) currently, the opendmarc milter here is launched as a 'simple' > non-forking/foreground systemd service I don't expect that the forking model would make a difference for how DMARC etc. policy is evaluated. > Initially, I see no difference. At least not with the XCLIENT > injection tests. > > For milter use, in postfix, is there any preference/requirement > for the milters to exec in forked vs. un-forked mode? Postfix does not care. If forked versus non-forked would change the bits that the milter receives or sends, then that would be a defect on the milter side (it can happen when they fork in the middle of a postfix-milter conversation that is already in progress, but the cole is old enough that it would be unlikely). Wietse