8000 How to skip SPF and DKIM checks if Mox is behind a mail gateway. · Issue #324 · mjl-/mox · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

How to skip SPF and DKIM checks if Mox is behind a mail gateway. #324

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related 8000 emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
Zettergaard opened this issue Mar 28, 2025 · 2 comments
Closed

How to skip SPF and DKIM checks if Mox is behind a mail gateway. #324

Zettergaard opened this issue Mar 28, 2025 · 2 comments

Comments

@Zettergaard
Copy link
Zettergaard commented Mar 28, 2025 •
edited
Loading

Hi,

I'm using Mox behind Proxmox Mail Gateway (PMG).

PMG already does all the spam checks, vice versa, then relays the mail to Mox and I'd like for Mox to skip the SPF and DKIM checks all together since that is already done.

I've looked at the rulesets but I don't think I fully understand them.

Image

Is this possible?
@mjl-
Copy link
Owner
mjl- commented Mar 29, 2025

Mox currently has no way to skip the SPF or DKIM checks, or DMARC checks for that matter: If an incoming message arrives without DKIM, with originally valid SPF, but which mox cannot verify due to a gateway, and the sending domain has a DMARC "reject" policy, then mox will reject the email according to the domain DMARC policy. Mox would have to get an option to not apply these checks. Mox normally needs this information for reputation-based junk filtering decisions too. Do you want mox to skip all junk filtering, including bayesian analysis? Just accepting everything that's coming in?

I think not having SPF is currently problematic. The DKIM signatures shouldn't be a problem? Assuming PMG does not change the message in a way that invalidates DKIM signatures on messages.

Perhaps the SPF evaluation result from PMG (assuming it generates them, would be good to check!) could be used by mox through ARC headers. Not sure if ARC includes SPF results, but I would expect so. Mox doesn't implement them yet (neither verifying incoming nor generating and signing outgoing). If you don't want mox to do any filtering, using SPF results from ARC won't be enough to make it all work.

Some of the features in mox, like "match messages for mailing lists based on [spf/dkim/dmarc] verified domain", also depend on knowing the SPF result. I'm afraid implementing a way to do without SPF verification can cause other trouble too, so would require careful thought.

@Zettergaard
Copy link
Author

Alright, thanks for the explanation. My plan was to use PMG in front of Mox for learning purposes but I'm starting to feel that it adds some unnecessary complexity. I'll probably run Mox by it self instead. Thanks again!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mjl- @Zettergaard
0