Skip to content

Fix HoldQuarantinedMessages being silently dependent on RejectFailures (issue #237)#302

Open
thegushi wants to merge 2 commits into
trusteddomainproject:developfrom
thegushi:fix/hold-quarantine-237
Open

Fix HoldQuarantinedMessages being silently dependent on RejectFailures (issue #237)#302
thegushi wants to merge 2 commits into
trusteddomainproject:developfrom
thegushi:fix/hold-quarantine-237

Conversation

@thegushi
Copy link
Copy Markdown
Collaborator

Summary

  • HoldQuarantinedMessages was AND'd with RejectFailures in the p=quarantine policy branch, so it silently had no effect unless both options were enabled simultaneously
  • The documentation describes HoldQuarantinedMessages as a completely standalone option with no such requirement
  • Fix removes the erroneous conf_rejectfail condition

Test plan

  • Enable HoldQuarantinedMessages true without RejectFailures and confirm messages failing DMARC with p=quarantine are held
  • Confirm messages are still held when both HoldQuarantinedMessages and RejectFailures are enabled
  • Confirm p=reject behavior is unaffected

Fixes #237

Dan Mahoney added 2 commits May 11, 2026 21:03
…(issue trusteddomainproject#235)

OPENDMARC_LIB_VERSION was hardcoded as 0x00000000 in libopendmarc/dmarc.h.
The intended fix was a dist-hook in Makefile.am that used sed to substitute
the computed HEX_VERSION at 'make dist' time. GitHub releases pull a raw git
tarball directly, bypassing 'make dist' entirely, so the substitution never
happened and every released package shipped with the zeroed version.

Fix: convert libopendmarc/dmarc.h to a proper autoconf template
(libopendmarc/dmarc.h.in) with 0x@HEX_VERSION@ as the placeholder. Add
libopendmarc/dmarc.h to AC_CONFIG_FILES so ./configure generates the
correctly-stamped header at build time regardless of how the source was
obtained. For version 1.4.2 this produces 0x01040200.

Also: remove the now-redundant dmarc.h sed substitution from the dist-hook,
and add the generated libopendmarc/dmarc.h to .gitignore.

Note: distributors and packagers should use 'make dist' to produce release
tarballs and upload them as GitHub release assets, rather than relying on
GitHub's auto-generated source archives.
…s (issue trusteddomainproject#237)

HoldQuarantinedMessages is documented as a standalone option but was
AND'd with RejectFailures in the quarantine policy branch, so it had
no effect unless both were enabled.
@thegushi thegushi added the needs-testing Item in a testing branch, feedback required to merge label May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-testing Item in a testing branch, feedback required to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant