DMARC without libspf2
Moritz Orbach via Exim-users <[email protected]>
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
Hi all, I don't trust libspf2 anymore because after almost 2 years it's still unclear to me if CVE-2023-42118 is fixed or not (e.g. https://bugs.gentoo.org/916493#c2). In an attempt to replace it I wrote an ACL that checks SPF alignment by running spfquery.pl from Mail::SPF. This works fine and adds the Received-SPF-header, but I don't know how or if I can pass the SPF alignment result into Exim in order to use the “dmarc_status” condition. Is that possible? -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/