[smtpd/qpsmtpd] a87474: No dmarc policy (#263)
[email protected] (GitHub) Wed, 04 May 2016 14:46:25 -0700
| Newsgroups | perl.qpsmtpd.dev |
|---|---|
| Message-ID | <572a6db1a6df2_44373fa063b172c03899e@hookshot-fe2-cp1-prd.iad.github.net.mail> |
----==_mimepart_572a6db1a69a7_44373fa063b172c038875
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: 7bit
Branch: refs/heads/master
Home: https://github.com/smtpd/qpsmtpd
Commit: a8747407be40649dabe7761dd2a68a91a529e99d
https://github.com/smtpd/qpsmtpd/commit/a8747407be40649dabe7761dd2a68a91a529e99d
Author: Daniel B <[email protected]>
Date: 2016-05-04 (Wed, 04 May 2016)
Changed paths:
M plugins/sender_permitted_from
Log Message:
-----------
No dmarc policy (#263)
* Update data_post_headers documentation
We cannot reject at this stage, which is only there to alter headers.
Fix #258
* DMARC plugin: reject in data_post
Followup of #258: we cannot reject a connection during data_post_headers. So add a new hook in data_post to do the real rejection
* Support spf rejects when no DMARC policy is published
When using DMARC, you have to run sender_permitted_from first, and without rejecting anything. If a DMARC policy is published, then fine, the dmarc plugin will handle this. But if there's no DMARC policy at all, then we can decide solely on SPF to reject on not. This decision must be taken after dmarc runs, so, add a hook into post_data (dmarc is evaluated in post_data_headers). A new no_dmarc_policy argument is available and you can decide the level at wich you want to reject on SPF failures
* Typo
----==_mimepart_572a6db1a69a7_44373fa063b172c038875--