[opendmarc-dev] Almost ready for integration
Murray S. Kucherawy
msk at blackops.org
Tue Jun 19 21:51:33 PDT 2012
I have a basic filter nearing the point where it'll be ready to interact
with libopendmarc. The skeleton of configuration, signal handling,
auto-restart, and the required milter stubs have been copied from OpenDKIM
where needed and modified accordingly.
The approach is basically to extract the From domain, the SPF domain (if
any) and any DKIM domains (from valid signatures only, of course) as
documented in the header by the addition of Authentication-Results header
fields. Thus, there's an expectation that upstream filters will add
those. Fortunately, sid-milter and opendkim both do that, which makes the
whole system nicely modular, and of course any other implementation that
adds those can be used.
That information is then available to be fed to libopendmarc, which can
work its DNS magic and then indicate whether the DMARC test is satisfied,
or what action is requested when it is not. The filter can then write
entries to the database using OpenDBX, and finally enact whatever policy
action was selected. The database pieces are in place already, including
a schema and a perl script to generate the XML reports based on records
found in the database.
Is there a quick rundown of the API calls I should be making to put the
pieces together?
-MSK
More information about the opendmarc-dev
mailing list