DKIM

[Shawn Iverson]

Monis,

Signing and DKIM are mutually exclusive.  You can't sign after DKIM sigs
are generated.  Signing will always break DKIM.

You can, however, position DKIM upstream for outbound and downstream for
inbound, which would generate the DKIM signature after signing.  This can
be done on separate instances or another postfix daemon on the same host
positioned appropriately for inbound and outbound traffic.

On Sat, Jul 13, 2019 at 5:09 AM Monis Monther <mmmm82 at gmail.com> wrote:

> Hi,
>
> I have installed opendkim with postfix-2.10.1-6 and mailscanner 5.1.1 , I
> have set the following
>
> Place New Headers At Top Of Message = yes
> Multiple Headers = add
>
> Still the DKIM signature fails when testing with
> check-auth at verifier.port25.com
>
> It succeeds when I set
>
> Sign Clean Messages = no
>
>
> My understanding is that when mailscanner signs the message after the DKIM
> signature, then it breaks it due to the addition of the signature
> text/images.
>
> How can we make MailScanner signatures work without failing DKIM.
>
> --
> Best Regards
> Monis
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us

[image: Cybersecurity]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190713/8eb1aff5/attachment.html>