[opendmarc-users] Host lists in 'IgnoreHosts' file still being scanned, with headers added. How to exclude specific domains from scanning?

[Juri Haberland]

On 2018-04-13 00:04, hal469 at xsmail.com wrote:
>> > A domain added as argument to 'IgnoreMailFrom', either as a single domain, or within a comma-separated list of domains *dies* result in non-scanning.
> 
> 1st, let's fix *MY* typo
> 
> -	within a comma-separated list of domains *dies* result in 
> non-scanning.
> +	within a comma-separated list of domains *DOES* result in 
> non-scanning.

Ahh, ok. That's good.

>> Will try to reproduce that tomorrow.

Obviously this is not necessary anymore :)

>    opendmarc: OpenDMARC Filter v1.4.0
> 
> are the only versions I have, and have tried.

OpenDMARC 1.4.0 is not released yet and is from the development 
branch... You might wan't to look at my patch collection at 
http://batleth.sapienti-sat.org/projects/opendmarc/.

>> IgnoreHosts:     ignore mail from an IP address
>> IgnoreMailFrom:  ignore mail from a domain
> 
> Hm.  That's a bitdifferent than how I understand the man page:

> 'hostnames' sounds pretty clearly *NOT* just ip addresses/CIDRs ...
> at best, confusing.

Right. You *can* put a hostname in there instead of an IP address, and 
it will be resolved to the hosts IP adress(es). But *all* mail from this 
host, regardless of the domain, is ignored. Might be used to not reject 
mails from a mailing list server, eventhough there is a patch that 
handles this a bit better.

> It would be useful to be able to reference a file as a <dataset>, as
> argument passed to 'IgnoreMailFrom'.
> TBH, haven't tried to see if it might work ...

I'm pretty sure that this won't work. But I see the need. You might 
wan't to open a ticket for it.

> The goal is to be able to bypass milter operation for a list of
> domains.  Ideally, supporting a list of domain/regex patterns in an
> external file.  How that's done, doesn't matter -- as long as you can.
>  For the moment, and a short list, IgnoreMailFrom works as well as
> anything.

What is the problem that you want to solve? I have not a single domain 
that I want to ignore, just wondering...


   Juri