我已经设置了 Postfix,以便它使用 Amavis(与 Spamassassin 和 ClamAV 结合使用)、openSPF、openDKIM 和 Postgrey,并且我最近将 openDMARC 添加到配置中。
它们都运行良好,但是,我现在想要做的是,如果收到的邮件通过了 DMARC 检查,则绕过 Postgrey。到目前为止,无论如何,所有内容都受灰名单的约束。
设置的限制/etc/postfix/main.cf
如下:
smtpd_client_restrictions = permit_mynetworks,
reject_invalid_hostname,
permit_rhswl_client swl.spamhaus.org,
reject_rbl_client zen.spamhaus.org,
check_client_access hash:/etc/postfix/client_restrictions,
check_recipient_access hash:/etc/postfix/roleaccounts,
reject_unknown_client,
permit
smtpd_relay_restrictions = permit_mynetworks,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
check_policy_service unix:private/policy-spf
smtpd_helo_restrictions = permit_mynetworks,
check_helo_access hash:/etc/postfix/helo_access,
reject_rhsbl_helo dbl.spamhaus.org,
reject_unauth_pipelining,
reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname,
reject_unknown_helo_hostname,
permit
smtpd_sender_restrictions = permit_mynetworks,
reject_rhsbl_sender dbl.spamhaus.org,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_unknown_address
smtpd_recipient_restrictions = reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_non_fqdn_hostname,
reject_invalid_hostname,
permit_mynetworks,
reject_unauth_pipelining,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unauth_destination,
reject_unknown_client,
# The next entry is Postfix accessing Postgrey...
check_policy_service inet:[ipv6-of-vm]:10023,
permit
smtpd_etrn_restrictions = permit_mynetworks,
reject
smtpd_data_restrictions = reject_unauth_pipelining,
reject_multi_recipient_bounce,
permit
设置过滤器:
milter_default_action = tempfail
milter_protocol = 6
# First it's openDKIM, then it's openDMARC.
smtpd_milters = inet:[ipv6-of-vm]:8891,inet:[ipv6-of-vm]:8892
non_smtpd_milters = $smtpd_milters
如果 DMARC 检查通过,如何让 Postfix 绕过 Postgrey?