On 11/18/2015 03:27 PM, Elod G wrote:
Policyd is not doing any rejection. While it is a policy server, it is
configured to always permit and its only purpose is to add SPF
authentication headers. These are later parsed by the opendmarc milter.
It would be nice, if SA too would parse them and not redo the SPF
validation.
I am still counting on SA to apply its rules and score the message
accordingly.
You're free to disable SA's SPF plugin and write the rules to parse the
Policyd headers.
Your setup is one of zillions of possible combinations..
You can hardly expect SA devs to foresee all possible third party header
combinations and supply rules for that.