On 2022-08-12 06:23, Dominik George wrote:
now that I have moved alias expansion to a socketmap service, I was
wondering what would be best for policy checks (for now, as simple as
"is address A allowed to send to address B?).
This os obviously possible using the milter, but then there is
Postfix' SMTP Access Policy Delegation.
When would I choose one over the other?
What it comes down to, mostly, is this: does your action require
access to the DATA payload (message headers and body) or not?
SPF, for example, does not, so SPF checking can be done in a policy
service.
DKIM (both signing and verification), OTOH, does. So DKIM actions
require a milter.
Rule of thumb, if you can do it in a policy service, choose that
over a milter. It's fast and lightweight.
--
http://rob0.nodns4.us/
