On 03/31/2013 10:56 PM, Scott Kitterman wrote: > On Sunday, March 31, 2013 10:30:03 PM Tom Hendrikx wrote: >> On 31-03-13 20:24, Scott Kitterman wrote: >>>> 2. Has any one ever tried deploying dmarc with postfix or with zimbra? >>> >>> Yes. >>> >>>> 3. I heard aboout opendmarc but curious to know since I already have >>>> postfix milter running on port 8891 can I run one more milter on port >>>> 8893 >>>> i.e. dmarc one? >>> >>> Yes. >> >> I'm currently in the process of setting up opendmarc on the receiving >> end on a ubuntu server with postfix. The docs (REAME.Debian at least) >> suggests using postfix-policyd-spf-python for SPF, but that seems >> impossible since mail reaches milters first and policy daemons later. >> >> I'm having a hard time finding an SPF milter other than >> spf-milter-python, which is rather non-configurable. Any suggestions? > > That's the only ~up to date SPF milter of which I'm aware. There are others, > but they are all unmaintained. > > If you do the SPF check as part of smtpd_recipient_restrictions (which is > recommended) you'll have an SPF result for DMARC since it doesn't conclude > it's evaluation until after DATA.
Ah yes, thanks for the pointer. I forgot that the milter decision can easily come after the smtpd_mumble_restrictions, and since DMARC uses header data, it can decide only after END-OF-DATA. I'll contribute my experiences with dmarc on ubuntu in the documentation effort mentioned in the other thread. -- Tom
signature.asc
Description: OpenPGP digital signature
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
