[opendmarc-dev] Almost ready for integration

Murray S. Kucherawy msk at blackops.org
Tue Jun 19 21:51:33 PDT 2012


I have a basic filter nearing the point where it'll be ready to interact 
with libopendmarc.  The skeleton of configuration, signal handling, 
auto-restart, and the required milter stubs have been copied from OpenDKIM 
where needed and modified accordingly.

The approach is basically to extract the From domain, the SPF domain (if 
any) and any DKIM domains (from valid signatures only, of course) as 
documented in the header by the addition of Authentication-Results header 
fields.  Thus, there's an expectation that upstream filters will add 
those.  Fortunately, sid-milter and opendkim both do that, which makes the 
whole system nicely modular, and of course any other implementation that 
adds those can be used.

That information is then available to be fed to libopendmarc, which can 
work its DNS magic and then indicate whether the DMARC test is satisfied, 
or what action is requested when it is not.  The filter can then write 
entries to the database using OpenDBX, and finally enact whatever policy 
action was selected.  The database pieces are in place already, including 
a schema and a perl script to generate the XML reports based on records 
found in the database.

Is there a quick rundown of the API calls I should be making to put the 
pieces together?

-MSK


More information about the opendmarc-dev mailing list