Re: SRS implemenation in sendmail

Stuart D. Gathman wrote:

> On Mon, 24 May 2004, Tom Lahti wrote:
>
>> In the page http://asarian-host.net/srs/sendmailsrs.htm an SRS
>> integration with sendmail is presented.  It is implied in the
>> opening paragraphs that .... However, this is NOT the case.  There
>> are no modifications to the sendmail config file presented on the
>> web page, which would generate a 550 error after the data phase if
>> the bounce recipient is not SRS signed.  What this implementation
>> WILL do is reject a bounce with an _invalid_ SRS signed recipient,
>> but if the recipient is not SRS signed and is nonetheless a valid
>> address, the bounce will be delivered anyway.
>
> I know you have been working on the Perl implementation, but you might
> want to look at my Python implementation ...
>
> and will generate the 550 error for unsigned bounces if you also use
> Python milter.

Perhaps in abundance, but spf-milter, as of 1.40, at:

http://spf.pobox.com/sendmail-milter-spf-1.41.pl

also has full support for "fake DSN detection" (-S), using SRS. A Milter,
imho, is really a good place to implement such a policy.

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx