Tom Reed via Postfix-users skrev den 2023-05-16 14:16:

Should we reject failed message on DKIM validation stage, or DMARC
validation stage, or both?

if dkim is based on reject you will ignore dmarc policy, just dont reject is safe :)

tip, add ipwhitelist in both so you never ever reject maillists, this will allow for reject direct mails to be rejected in dmarc policy, hopefully dkim will in comming updates have remove of reject code, it does not belong to be there

in postfix do smtpd_milter_maps with cidr listnings of mailservs that run maillists with value DISABLE, then postfix will not do any milter tests for ips listed as maillists

my point save resources
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to