I have Postfix/DKIM version V 2.4.0 installed.

DKIM configuration:
On-DNSError             tempfail
DNSTimeout              10

SSP policy implemented:
_ssp._domainkey.<mydomain>. 900 IN TXT "dkim=all \;handling=deny \; t=s"


Test 1: receiving an external unsigned message with a faked "from"
header and DNS server is responding within DNSTimeout 
Then I have 2 log lines:  
 a/ (unknown-jobid) external host be-1-data attempted to send as <mydomain> 
 b/ rejected per sender domain policy
=> result here is ok

Test 2: receiving a external unsigned message with a faked "from" header
and DNS server is NOT responding within DNSTimeout 
I have only the first log line so not the second SSP log line (ok so
far) but the message passes tru the system.
 a/ (unknown-jobid) external host be-1-data attempted to send as <mydomain>
=> I expected to have a tempfail as per On-DNSError setting

Is it a bug here or is there something I do not understand?
Thank you for your help.
Rgds
Alain

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to