<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16850" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2>I am not sure how sendmail does things but I use two
instances of exim as well,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009> <FONT
face=Arial color=#0000ff size=2>eximIN (check
DKIM)----------------->INqueue--> MailScanner(Do MS
Stuff)---->OUTQueue-----> EximOut(Sign DKIM and other out
stuff)</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2>The only difference between the exim instance is the
config(s) the use. I have no recpt,data,ehlo acls in the outbound and I have no
domainkey/DKIM signing in the inbound</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=765382219-22062009><FONT face=Arial
color=#0000ff size=2>Rick</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Alex
Neuman<BR><B>Sent:</B> Monday, June 22, 2009 2:58 PM<BR><B>To:</B> MailScanner
discussion<BR><B>Subject:</B> Re: DKIM signing<BR></FONT><BR></DIV>
<DIV></DIV>The point I was trying to make is that MailScanner works like this
(oversimplifying, I know, but bear with me):<BR><BR>1. First instance of
sendmail grabs e-mail after milters and such, and deposits in an incoming
queue<BR>2. MailScanner grabs, scans, deals with messages in the queue and
places them in the outgoing (final) queue<BR>3. Second instance of sendmail
grabs e-mail from outgoing (final) queue and delivers them to their final
destination.<BR><BR>In order to DKIM-sign things it would have to be done using
the second instance. Since MailScanner basically runs the same instance of
sendmail using a command line parameter to distinguish the two, there would have
to be a slight change to the way step 3 is done if you wanted to do it on one
machine. Otherwise step 4 would be to have the outgoing MTA (separate machine)
do the DKIM signing.<BR><BR>Please correct me if I'm looking at this the wrong
way.<BR><BR>
<DIV class=gmail_quote>On Mon, Jun 22, 2009 at 1:42 PM, Rick Cooper <SPAN
dir=ltr><<A
href="mailto:rcooper@dwford.com">rcooper@dwford.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>I don't
use sendmail (exim no milters required) but I am sure there is a way to handle
it easily in sendmail. Be advised however that when I first implemented
domainkeys the test server at <A href="http://sendmail.net"
target=_blank>sendmail.net</A> was the only domainkeys test server (of
4) to state that my keys were invalid. It does pass my DKIM keys but
still doesn't pass the domainkeys.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2>Rick</FONT></SPAN></DIV><BR>
<DIV lang=en-us dir=ltr align=left>
<HR>
<FONT face=Tahoma size=2><B>From:</B> <A
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target=_blank>mailscanner-bounces@lists.mailscanner.info</A> [mailto:<A
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target=_blank>mailscanner-bounces@lists.mailscanner.info</A>] <B>On Behalf Of
</B>Alex Neuman<BR><B>Sent:</B> Monday, June 22, 2009 12:02 PM<BR><B>To:</B>
MailScanner discussion<BR><B>Subject:</B> Re: DKIM
signing<BR></FONT><BR></DIV>
<DIV></DIV>Any chance of someone thinking up a way to fire up a third instance
of sendmail on one machine to do something like this?<BR><BR>
<DIV class=gmail_quote>On Mon, Jun 22, 2009 at 10:38 AM, Rick Cooper <SPAN
dir=ltr><<A href="mailto:rcooper@dwford.com"
target=_blank>rcooper@dwford.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">You
don't want to sign dkim or domainkeys until the last thing before
the<BR>message is "place on the wire". Any modification made after the
signing<BR>with, of course make the signature invalid. This means the
outbound MTA has<BR>to be the signing
agent.<BR><BR>Rick<BR><BR>-----Original Message-----<BR>From: <A
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target=_blank>mailscanner-bounces@lists.mailscanner.info</A><BR>[mailto:<A
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target=_blank>mailscanner-bounces@lists.mailscanner.info</A>] On Behalf Of
ram<BR>Sent: Monday, June 22, 2009 7:15 AM<BR>To: MailScanner
discussion<BR>Subject: DKIM signing<BR><BR>Can I use any plugin in
MailScanner to DKIM sign outbound mail<BR><BR><BR><BR>--<BR>MailScanner
mailing list<BR><A href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before
posting, read <A href="http://wiki.mailscanner.info/posting"
target=_blank>http://wiki.mailscanner.info/posting</A><BR><BR>Support
MailScanner development - buy the book off the website!<BR><BR>--<BR>This
message has been scanned for viruses and<BR>dangerous content by
MailScanner, and is<BR>believed to be clean.<BR><BR><BR><BR>--<BR>This
message has been scanned for viruses and<BR>dangerous content by
MailScanner, and is<BR>believed to be clean.<BR><FONT
color=#888888><BR><BR>--<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before
posting, read <A href="http://wiki.mailscanner.info/posting"
target=_blank>http://wiki.mailscanner.info/posting</A><BR><BR>Support
MailScanner development - buy the book off the
website!<BR></FONT></BLOCKQUOTE></DIV><BR><BR clear=all><BR>-- <BR>Alex Neuman
van der Hans<BR>Reliant Technologies<BR>+507 6781-9505<BR>+507 202-1525<BR><A
href="mailto:alex@rtpty.com" target=_blank>alex@rtpty.com</A><BR>Skype:
alexneuman<BR><BR>-- <BR>This message has been scanned for viruses and
<BR>dangerous content by <A href="http://www.mailscanner.info/"
target=_blank><B>MailScanner</B></A>, and is <BR>believed to be clean.
</DIV><BR><FONT color=#888888>-- <BR>This message has been scanned for viruses
and <BR>dangerous content by <A href="http://www.mailscanner.info/"
target=_blank><B>MailScanner</B></A>, and is <BR>believed to be clean.
</FONT><BR>--<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before
posting, read <A href="http://wiki.mailscanner.info/posting"
target=_blank>http://wiki.mailscanner.info/posting</A><BR><BR>Support
MailScanner development - buy the book off the
website!<BR><BR></BLOCKQUOTE></DIV><BR><BR clear=all><BR>-- <BR>Alex Neuman van
der Hans<BR>Reliant Technologies<BR>+507 6781-9505<BR>+507 202-1525<BR><A
href="mailto:alex@rtpty.com">alex@rtpty.com</A><BR>Skype: alexneuman<BR><BR>--
<BR>This message has been scanned for viruses and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is <BR>believed
to be clean. </BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>