On 27.06.26 16:43, Dan Mahoney via Postfix-users wrote:
DMARC (the protocol) has the ability to sigil p=quarantine in a message when there's an authentication failure, which currently by default in OpenDMARC (the software) just gets flagged as an Authentication-results header. However...
[...]

The intro paragraph says only that milters can "modify or reject" a message: i.e. "Postfix passes it to the first configured Milter which may modify or reject that content or may modify the stored envelope". The hold queue is neither of these actions.
[...]

Yes, the MILTER_README should perhaps be updated to make this clear.

Now, the Hold queue is invisible to most downstream users. I'd *rather* just let downstream filters process this, and things like SpamAssassin don't magically equate dmarc=fail; p=quarantine with "must accept message but mark as spam, move to Junk", it's simply a score adjustment, which can be overridden by other things like bayes, user preferences, welcomelists, etc (vs an override in OpenDMARC.conf), so it's also imperfect. The domain owner has indicated that we are to do something specific with the message, we should do it, even if we're interpretive about what "quarantining" means. But I digress.

At any rate, my postfix question is: Is the milter interface wired up to the milter sockets in Postfix to allow a move to the quarantine queue by default? Or must one do something more in postfix beyond simply configuring the milter socket to turn this on? (If so, it's worth mentioning it in the OpenDMARC docs).

according to https://marc.info/?l=postfix-devel&m=165409373317244&w=2
the postfix honors the quarantine request by moving the message into the HOLD queue.

you just need to have tools to manage the HOLD queue, there are some listed on http://www.postfix.org/addon.html

--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to