[pfx] Re: Configuring a milter for quarantine/hold actions (documentation clarifications)

On 27.06.26 16:43, Dan Mahoney via Postfix-users wrote:
> DMARC (the protocol) has the ability to sigil p=quarantine in a message 
> when there's an authentication failure, which currently by default in 
> OpenDMARC (the software) just gets flagged as an Authentication-results 
> header.  However...
[...]

> The intro paragraph says only that milters can "modify or reject" a 
> message: i.e.  "Postfix passes it to the first configured Milter which may 
> modify or reject that content or may modify the stored envelope".  The 
> hold queue is neither of these actions.
[...]

Yes, the MILTER_README should perhaps be updated to make this clear.

> Now, the Hold queue is invisible to most downstream users.  I'd *rather* 
> just let downstream filters process this, and things like SpamAssassin 
> don't magically equate dmarc=fail; p=quarantine with "must accept message 
> but mark as spam, move to Junk", it's simply a score adjustment, which can 
> be overridden by other things like bayes, user preferences, welcomelists, 
> etc (vs an override in OpenDMARC.conf), so it's also imperfect.  The 
> domain owner has indicated that we are to do something specific with the 
> message, we should do it, even if we're interpretive about what 
> "quarantining" means.  But I digress.
>
> At any rate, my postfix question is: Is the milter interface wired up to 
> the milter sockets in Postfix to allow a move to the quarantine queue by 
> default?  Or must one do something more in postfix beyond simply 
> configuring the milter socket to turn this on?  (If so, it's worth 
> mentioning it in the OpenDMARC docs).

according to https://marc.info/?l=postfix-devel&m=165409373317244&w=2
the postfix honors the quarantine request by moving the message into the 
HOLD queue.

you just need to have tools to manage the HOLD queue, there are some listed 
on http://www.postfix.org/addon.html

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS screen display 16.7 million colors
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]