<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Setup 2 different OpenDKIM instances and run the checking/header adding one on <span>smtpd_milters and the other signing one on non_<span>smtpd_milters.</span></span></p>
<div><br>
</div>
Dave<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> MailScanner <mailscanner-bounces+djones=ena.com@lists.mailscanner.info> on behalf of Ken Smith <kens@kensnet.org><br>
<b>Sent:</b> Thursday, April 12, 2018 4:23 AM<br>
<b>To:</b> MailScanner Discussion<br>
<b>Subject:</b> OpenDKIM and MailScanner</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText"><br>
Hullo - I'm new to this list but been a MailScanner user for 10+ years.<br>
<br>
I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd <br>
like to have all e-mail go out with an appended footer that has company <br>
standard signature / disclaimers etc etc. I'm also using DKIM.<br>
<br>
From what I can see the DKIM signature is generated by the incoming <br>
sendmail instance that receives the message from the MUA, and the result <br>
placed in mqueue.in. MailScanner then does its work including modifying <br>
the message body, because I have "Sign Clean Messages set" and my custom <br>
footer is in inline.sig.* As far as I can tell, MailScanner then invokes <br>
sendmail to actually do the sending.<br>
<br>
The catch appears to be that the message body has been modified, footer <br>
added etc, after the DKIM signature has been calculated and thus the <br>
DKIM checks fail on delivery. :-(<br>
<br>
Would it be possible to arrange for the DKIM signature to be calculated <br>
by the outgoing sendmail on the completed message? This might involve <br>
two different .cf files. One without the DKIM milter for the incoming <br>
Sendmail and one with DKIM settings for the outgoing.<br>
<br>
Receipt of e-mail, in this instance, is done by another machine. My <br>
suggestion may not work well for verifying DKIM validity on receipt as <br>
the incoming Sendmail instance would be need to be in verify mode for <br>
that one. I guess two OpenDKIM instances could be run. One in verify and <br>
one in send mode.<br>
<br>
Would this be easier with Postfix & alterMIME rather than Sendmail?<br>
<br>
Thoughts on this suggestion or other ideas???<br>
<br>
Many thanks<br>
<br>
Ken<br>
<br>
<br>
<br>
-- <br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
mailscanner@lists.mailscanner.info<br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</div>
</span></font></div>
</div>
</div>
</body>
</html>