OpenDKIM and MailScanner

[Ken Smith]

Hullo - I'm new to this list but been a MailScanner user for 10+ years.

I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd 
like to have all e-mail go out with an appended footer that has company 
standard signature / disclaimers etc etc. I'm also using DKIM.

 From what I can see the DKIM signature is generated by the incoming 
sendmail instance that receives the message from the MUA, and the result 
placed in mqueue.in. MailScanner then does its work including modifying 
the message body, because I have "Sign Clean Messages set" and my custom 
footer is in inline.sig.* As far as I can tell, MailScanner then invokes 
sendmail to actually do the sending.

The catch appears to be that the message body has been modified, footer 
added etc,  after the DKIM signature has been calculated and thus the 
DKIM checks fail on delivery. :-(

Would it be possible to arrange for the DKIM signature to be calculated 
by the outgoing sendmail on the completed message? This might involve 
two different .cf files. One without the DKIM milter for the incoming 
Sendmail and one with DKIM settings for the outgoing.

Receipt of e-mail, in this instance, is done by another machine. My 
suggestion may not work well for verifying DKIM validity on receipt as 
the incoming Sendmail instance would be need to be in verify mode for 
that one. I guess two OpenDKIM instances could be run. One in verify and 
one in send mode.

Would this be easier with Postfix & alterMIME rather than Sendmail?

Thoughts on this suggestion or other ideas???

Many thanks

Ken



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.