Antw: Re: amavis-dkim: How to discard mail with no or invalid signature

[Gerhard Rappenecker]

Hello all,

thanks a lot for all answers.

It seems I have to use SPF or DMARC to get what I want. Unfortunately these components are not integrated in the SuSE Linux software distribution. I'd like to use only the onboard resources postfix, amavis-new with DCIM, spamassassin because of automatic updating.

Is there actually no way in amavis (or spamassassin) to reject/quaratine mails from a specific sender with no or an invalid DKIM signatur?
Is there any way to reject those mails in postfix after amavis DKIM verifying?

I've allready tried to check the headers in postfix for DKIMs "Authentication-Results", but "header_checks" take place before the DKIM verification and "smtp_header_checks" do not allow to cutoff the mail delivery.

Hope anyone can help me

best regards
Gerhard


>>> Maurizio Marini <maumar at datalogica.com> schrieb am Mittwoch, 13. Januar 2016 um
12:27 in Nachricht <20160113122726.221e5099.maumar at datalogica.com>:
> On Wed, 13 Jan 2016 12:01:52 +0100
> "Gerhard Rappenecker" <G.Rappenecker at hs-offenburg.de> wrote:
> 
>> My intention is, to reject mail from outside with a faked sender adress
>> of our own domain. In the past we were attacked by such mails to our
>> mailinglists.
> Hello Gerhard
> I use spf with -all instead of ~all to do exactly what you want.
> I do not received anymore spam with my domain in from address
> I mean: @datalogica.com
> -m