[opendmarc-users] OpenDMARC useless with Postfix

Joachim Fahrner jf at fahrner.name
Thu Sep 18 09:32:23 PDT 2014


I found that OpenDMARC is useless in Postfix environments. OpenDMARC
does not calculate and verify DKIM hashes on its own, but relies on
Authentication-Result headers from SPF and DKIM milters. But in Postfix
one milter does not see headers that some other milter inserts.

You can compile OpenDMARC with SPF support and let it check SPF on its
own, but that makes no sense when DKIM support is missing. So running
OpenDMARC as a Postfix milter is only a placebo (you can do the same
checks with a spf policy daemon).

Mit besten Grüßen
Joachim Fahrner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6129 bytes
Desc: not available
URL: <http://www.trusteddomain.org/pipermail/opendmarc-users/attachments/20140918/76a751c1/attachment.bin>

More information about the opendmarc-users mailing list