Changes for version 4.20261020 - 2026-10-20
- SECURITY: SMTP mode change_header now matches header names the same way the DATA parser does. Previously a header with whitespace before the colon (e.g. "Authentication-Results : ...") was counted by Sanitize but never removed, and shifted removal of later occurrences onto the wrong header.
- DMARC: Fix a security issue where a domain could escape DMARC evaluation silently when a message has more From domains than skip_on_multifrom. Multifrom limits are now applied up front based on the total number of DMARC entities. Entities over the limit are reported as dmarc=permerror (too many from domains) and the mail is quarantined. Limits now trigger when the count is more than the configured value, as documented.
- DMARC: strict_multifrom now quarantines directly rather than relying on a later DMARC evaluation succeeding.
- DMARC: Limit early DMARC DNS lookups for From domains to skip_on_multifrom
Documentation
A Perl Mail Authentication Milter
Manage the Authentication Milter Block List
A Perl Mail Authentication Milter client
Work with Authentication Milter logs
Modules
A Perl Mail Authentication Milter
App::Cmd base class
Command to add a block to a given file
Command to delete a block for a given file
Command to list current blocks for a given file
App::Cmd base class
Command to convert an authentication milter arex log back into an A-R header
Client for connecting back to the authmilter server
Load config files for Authentication Milter
Define and export useful constants
Class representing an exception
Load and serve static files via the in-built http server.
Handler superclass
Handler class for ARC
Handler class for sending data to Abusix
Example handler class
Handler class for Address alignment
Handler class for SMTP Auth
Handler class for BIMI
Block mail based on simple rules
Handler class for DKIM
Handler class for DMARC
Handler class for IPRev
Handler class for Local IP Connections
Handler class for logging of headerss
Handler class for PTR checking
Handler class for RBLDNS checks
Handler class for Checking Return address validity
Handler class for SPF
Handler class for Removing headers
Handler class for SenderID
Handler class for message size metrics
Handler class for TLS
Timeout Tester
Handler class for Trusted IP addresses
Handler class for Google specific DKIM
Class for metrics generation
Class for Grafana dashboards
Local modified copy of Net::Milter
Patches to Net::Server::PreFork
Setup system wide pragmas
Milter protocol handling
SMTP protocol handling
DNS Recolver methods
Class used for testing
Class for testing handlers