OpenDKIM and MailScanner
kens at kensnet.org
Thu Apr 12 09:23:03 UTC 2018
Hullo - I'm new to this list but been a MailScanner user for 10+ years.
I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd
like to have all e-mail go out with an appended footer that has company
standard signature / disclaimers etc etc. I'm also using DKIM.
From what I can see the DKIM signature is generated by the incoming
sendmail instance that receives the message from the MUA, and the result
placed in mqueue.in. MailScanner then does its work including modifying
the message body, because I have "Sign Clean Messages set" and my custom
footer is in inline.sig.* As far as I can tell, MailScanner then invokes
sendmail to actually do the sending.
The catch appears to be that the message body has been modified, footer
added etc, after the DKIM signature has been calculated and thus the
DKIM checks fail on delivery. :-(
Would it be possible to arrange for the DKIM signature to be calculated
by the outgoing sendmail on the completed message? This might involve
two different .cf files. One without the DKIM milter for the incoming
Sendmail and one with DKIM settings for the outgoing.
Receipt of e-mail, in this instance, is done by another machine. My
suggestion may not work well for verifying DKIM validity on receipt as
the incoming Sendmail instance would be need to be in verify mode for
that one. I guess two OpenDKIM instances could be run. One in verify and
one in send mode.
Would this be easier with Postfix & alterMIME rather than Sendmail?
Thoughts on this suggestion or other ideas???
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner