On 16.11.22 02:47, supp...@openmbox.net wrote:
@raf is right. if you have enabled opendkim and policyd-spf on postfix, that
headers related to spf and dkim will be added automatically.
I use:
spf-milter (the same source as policyd-spf-python)
opendkim
openarc
opendmarc
so far in soft mode (no rejections)
opendmarc can use results of previous three in its decisions.
On Mon, Nov 14, 2022 at 12:33:02PM -0700, Bryan Arenal <b.are...@gmail.com>
wrote:
> Is Postfix capable of checking DKIM and SPF records on incoming email
> and adding headers based upon its findings? For example, an email
> with a valid DKIM signature shows these headers sent to O365:
>
> ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
> smtp.mailfrom=example.com; dmarc=pass action=none header.from=example.com;
> dkim=pass header.d=example.com; arc=none
>
> My google searches have only returned results on how to do DKIM
> signing on outbound email and not how to verify them on inbound
> emails.
November 16, 2022 at 8:09 AM, "raf" <post...@raf.org> wrote:
That "ARC-Authentication-Results" header is actually
ARC, not DKIM/SPF (i.e. a meta-DMARC for forwarders
that modify what is being forwarded). I don't know what
can create those headers. OpenARC seems defunct. I
think OpenDMARC checks ARC headers (as well as
DMARC/DKIM/SPF) and adds "Authentication-Results"
headers.
rspamd probably does it as well.
There's a tutorial on adding OpenDMARC to postfix on Debian here:
https://www.linuxbabe.com/mail-server/opendmarc-postfix-debian
It's for debian but there might be equivalent tutorials
for other Linux systems on that website.
It might assume other steps in the complete tutorial:
https://www.linuxbabe.com/mail-server/build-email-server-from-scratch-debian-postfix-smtp
But maybe not.
People say good things about rspamd as well. Check that out.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.
