On Fri, May 16, 2014 at 2:09 PM, Paul N. Pace via dmarc-discuss < [email protected]> wrote:
> I am setting up DMARC for the first time. My test server is running Ubuntu > 12.04 and I am using OpenDMARC 1.2.0 installed from the Ubuntu repositories. > That probably means we should be talking on the opendmarc-users list and not here. This list goes to a lot of people that don't use OpenDMARC. > I see in man opendmarc.conf that RejectFailures is set to false by > default. Does this mean that when a DMARC record states p=reject, OpenDMARC > will not reject the email? > Correct. See also the opendmarc.conf(5) man page. > If I understand it correctly, to send failure reports (when requested), > ForensicReports must be set to true, but default is false. Since these are > only sent based on the record, is there some drawback to sending failure > reports? > You can contribute to a denial-of-service attack by generating a storm of these if someone wants you to. This is why it's off by default. -MSK
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
