Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 14.03.21 20:14, Juri Haberland wrote: > On 14.03.21 12:00, Bastian Blank wrote: >> On Sun, Mar 14, 2021 at 11:51:05AM +0100, Juri Haberland wrote: >>> You should get this information from the AR-header. It should look like >>> this: >>> Authentication-Results: mx.example.org; dmarc=pass

Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 14.03.21 12:00, Bastian Blank wrote: > On Sun, Mar 14, 2021 at 11:51:05AM +0100, Juri Haberland wrote: >> You should get this information from the AR-header. It should look like >> this: >> Authentication-Results: mx.example.org; dmarc=pass (p=quarantine >> dis=none) header.from=example.com; >>

Re: Milter Behavior

2021-03-14 Thread Bastian Blank
On Sun, Mar 14, 2021 at 11:51:05AM +0100, Juri Haberland wrote: > You should get this information from the AR-header. It should look like > this: > Authentication-Results: mx.example.org; dmarc=pass (p=quarantine > dis=none) header.from=example.com; > See the "p=quarantine dis=none" in the

Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 11/03/2021 10:22, Nick Tait wrote: > On 11/03/21 11:37 am, Dan Mahoney wrote: >> This fix has been merged to the opendmarc “Develop” branch as of a few >> minutes ago and will likely be in a 1.4.1 that comes out in the next few >> weeks, and will default to *not* quaranting the mail. The

Re: Milter Behavior

2021-03-12 Thread Dan Mahoney
> On Mar 11, 2021, at 11:09 PM, Dominic Raferd wrote: > > On 12/03/2021 02:35, Dan Mahoney wrote: >> >>> On Mar 11, 2021, at 1:00 AM, Dominic Raferd >> > wrote: >>> >>> This works for me: >>> >>> # grep ^RejectFailures /etc/opendmarc.conf # (note: false is

Re: Milter Behavior

2021-03-11 Thread Dominic Raferd
On 12/03/2021 02:35, Dan Mahoney wrote: On Mar 11, 2021, at 1:00 AM, Dominic Raferd > wrote: This works for me: # grep ^RejectFailures /etc/opendmarc.conf # (note: false is the default anyway) RejectFailures false That’s orthogonal. RejectFailures only

Re: Milter Behavior

2021-03-11 Thread Dan Mahoney
> On Mar 11, 2021, at 1:00 AM, Dominic Raferd wrote: > > On 10/03/2021 19:00, Dan Mahoney (Gushi) wrote: >> All, >> >> I'm working with the OpenDMARC folks on doing bug triage, and someone has >> requested that if a domain's policy says p=quarantine, that it should be >> "accepted" by

Re: Milter Behavior

2021-03-11 Thread Dan Mahoney
> On Mar 11, 2021, at 1:22 AM, Nick Tait wrote: > > On 11/03/21 11:37 am, Dan Mahoney wrote: >> This fix has been merged to the opendmarc “Develop” branch as of a few >> minutes ago and will likely be in a 1.4.1 that comes out in the next few >> weeks, and will default to *not* quaranting

Re: Milter Behavior

2021-03-11 Thread Nick Tait
On 11/03/21 11:37 am, Dan Mahoney wrote: This fix has been merged to the opendmarc “Develop” branch as of a few minutes ago and will likely be in a 1.4.1 that comes out in the next few weeks, and will default to *not* quaranting the mail. The option will be called HoldQuarantinedMessages

Re: Milter Behavior

2021-03-11 Thread Dominic Raferd
On 10/03/2021 19:00, Dan Mahoney (Gushi) wrote: All, I'm working with the OpenDMARC folks on doing bug triage, and someone has requested that if a domain's policy says p=quarantine, that it should be "accepted" by postfix, and left for something like SpamAssassin to deal with.  (I don't see

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Dan Mahoney: > > I would be gratefuil if you can get this addressed in the Milter. > > > > Please keep us informed of what happens. If it really does not work > > out then we can look into b) add a feature to Postfix stable releases. > > But the bar is high for changes to stable releases. > >

Re: Milter Behavior

2021-03-10 Thread Dan Mahoney
> On Mar 10, 2021, at 1:45 PM, Wietse Venema wrote: > > Dan Mahoney: >> I?ve been on the project for a few days. I?m feeling a lot of >> vitriol here. Please don?t shoot the messenger. > > The natural response would be to push back - fix the milter (the > root cause of the problem) instead

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Dan Mahoney: > I?ve been on the project for a few days. I?m feeling a lot of > vitriol here. Please don?t shoot the messenger. The natural response would be to push back - fix the milter (the root cause of the problem) instead of the code that talks to it. > >> Either way, this is

Re: Milter Behavior

2021-03-10 Thread Dan Mahoney
> On Mar 10, 2021, at 12:36 PM, Wietse Venema wrote: > > Dan Mahoney (Gushi): >>> Why not prepend a header (like Milters already do) and let Spamassassin >>> etc. trigger on that label. >> >> Let me try this a second time. >> >> Fixing the milter to return success is the patch I'm currently

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Dan Mahoney (Gushi): > > Why not prepend a header (like Milters already do) and let Spamassassin > > etc. trigger on that label. > > Let me try this a second time. > > Fixing the milter to return success is the patch I'm currently working on > for opendmarc. Telling me "why don't you fix your

Re: Milter Behavior

2021-03-10 Thread Benny Pedersen
On 2021-03-10 20:55, Dan Mahoney (Gushi) wrote: The simple answer I still haven't gotten, but assume from your response, is "no, that knob doesn't exist"* Is that correct? postfix can only disable milters pr client ips see smtpd_milter_maps i have not seen what to do to only one milter

Re: Milter Behavior

2021-03-10 Thread Dan Mahoney (Gushi)
On Wed, 10 Mar 2021, Wietse Venema wrote: Dan Mahoney (Gushi): Postifix has a concept of quarantine. It is called the HOLD queue. As of 2006, when the Milter says QUARANTINE, then Postfix will quarantine the message, i.e. place it in the HOLD queue, for admins to deal with manually. Yes,

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Dan Mahoney (Gushi): > > Postifix has a concept of quarantine. It is called the HOLD queue. > > > > As of 2006, when the Milter says QUARANTINE, then Postfix will > > quarantine the message, i.e. place it in the HOLD queue, for admins > > to deal with manually. > > Yes, and I am asking if there

Re: Milter Behavior

2021-03-10 Thread Dan Mahoney (Gushi)
On Wed, 10 Mar 2021, Claus Assmann wrote: On Wed, Mar 10, 2021, Dan Mahoney (Gushi) wrote: Yes, and I am asking if there is a postfix knob that says "I know what the milter says, but I want something different, because postfix doesn't know ... Why don't you "fix" the milter instead? Then

Re: Milter Behavior

2021-03-10 Thread Claus Assmann
On Wed, Mar 10, 2021, Dan Mahoney (Gushi) wrote: > Yes, and I am asking if there is a postfix knob that says "I know what the > milter says, but I want something different, because postfix doesn't know ... Why don't you "fix" the milter instead? Then it would work the way you want it for every

Re: Milter Behavior

2021-03-10 Thread Dan Mahoney (Gushi)
On Wed, 10 Mar 2021, Wietse Venema wrote: Dan Mahoney (Gushi): All, I'm working with the OpenDMARC folks on doing bug triage, and someone has requested that if a domain's policy says p=quarantine, that it should be "accepted" by postfix, and left for something like SpamAssassin to deal with.

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Wietse Venema: > Dan Mahoney (Gushi): > > All, > > > > I'm working with the OpenDMARC folks on doing bug triage, and someone has > > requested that if a domain's policy says p=quarantine, that it should be > > "accepted" by postfix, and left for something like SpamAssassin to deal > > with.

Re: Milter Behavior

2021-03-10 Thread Wietse Venema
Dan Mahoney (Gushi): > All, > > I'm working with the OpenDMARC folks on doing bug triage, and someone has > requested that if a domain's policy says p=quarantine, that it should be > "accepted" by postfix, and left for something like SpamAssassin to deal > with. (I don't see any specific

Milter Behavior

2021-03-10 Thread Dan Mahoney (Gushi)
All, I'm working with the OpenDMARC folks on doing bug triage, and someone has requested that if a domain's policy says p=quarantine, that it should be "accepted" by postfix, and left for something like SpamAssassin to deal with. (I don't see any specific handling in spamassassin that treats