[opendmarc-dev] draft: patch to implement an override mechanism for MLMs

[Juri Haberland]

Hello,

attached you will find a patch that implements a mechanism to override mails
from MLMs in case a message would be rejected. It is a draft patch as it
misses documentation and might need some more tweeking, but first tests here
are promising.

It introduces a new config option OverrideMLM, which expects a file holding
hostnames and/or IP adresses (similiar to the IgnoreHosts option). I didn't
test it yet with CIDR expressions, but as I use the same code that is used for
IgnoreHosts, I expect that to work, too.

If a mail from a domain with p=reject (or quarantine) arrives via a mailing
list that alters the message (like the Dovecot list), the DMARC check fails,
but if the sending host is in the OverrideMLM file, the policy is overriden to
'none'. For that case I introduced new actions that are logged into the
database.

The opendmarc-reports script is changed so that it will send an override
reason of type "mailing_list" in the report to that domain.

I would love to here your comments.

Cheers,
  Juri
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OverrideMLM.patch
Type: text/x-diff
Size: 7768 bytes
Desc: not available
URL: <http://www.trusteddomain.org/pipermail/opendmarc-dev/attachments/20160520/05d8e57d/attachment.patch>