Files
lasuite-messages/docs
cf0b70e7ee (inbound) ARC relay-trust: inbound_auth "arc" + arc_verdict rule (#763)
New "arc" inbound_auth mode derives dkim/dmarc only from an ARC-sealed
ARC-Authentication-Results whose outermost sealer is in
SPAM_CONFIG["trusted_arc_sealers"] (empty = any valid seal); plaintext
headers are never trusted.

New SPAM_CONFIG["rules"][..]["arc_verdict"] (trusted|untrusted) marks 
or drops inbound mail lacking a valid trusted seal, so a publicly-reachable
mta-in effectively accepts only mail sealed by a trusted relay. 
The chain is verified with dkimpy; a verification/DNS failure never spams or drops.

Config reference in docs/spam.md.
---------

Co-authored-by: Riël Notermans <riel@mosa.cloud>
Co-authored-by: Riël Notermans <riel@zzapps.nl>
2026-07-24 01:20:12 +02:00
..
2026-07-22 16:11:19 +02:00