Skip to content

Commit 62efe98

Browse files
authored
Disable OpenDMARC sending reports (#2299)
OpenDMARC report messages, while potentially useful for peer operators of mail servers, are abusable and should not be enabled by default. This change prioritizes the safety of the Box's reputation.
1 parent df44056 commit 62efe98

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

setup/dkim.sh

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ chmod go-rwx $STORAGE_ROOT/mail/dkim
6363
tools/editconf.py /etc/opendmarc.conf -s \
6464
"Syslog=true" \
6565
"Socket=inet:8893@[127.0.0.1]" \
66-
"FailureReports=true"
66+
"FailureReports=false"
6767

6868
# SPFIgnoreResults causes the filter to ignore any SPF results in the header
6969
# of the message. This is useful if you want the filter to perfrom SPF checks
@@ -82,11 +82,11 @@ tools/editconf.py /etc/opendmarc.conf -s \
8282
tools/editconf.py /etc/opendmarc.conf -s \
8383
"SPFSelfValidate=true"
8484

85-
# Enables generation of failure reports for sending domains that publish a
85+
# Disables generation of failure reports for sending domains that publish a
8686
# "none" policy.
8787

8888
tools/editconf.py /etc/opendmarc.conf -s \
89-
"FailureReportsOnNone=true"
89+
"FailureReportsOnNone=false"
9090

9191
# AlwaysAddARHeader Adds an "Authentication-Results:" header field even to
9292
# unsigned messages from domains with no "signs all" policy. The reported DKIM

0 commit comments

Comments
 (0)