<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span><br></span></div><div><br></div> <div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"> <div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight: bold;">Απο:</span></b> Mark Martinec <Mark.Martinec+amavis@ijs.si><br> <b><span style="font-weight: bold;">Προς:</span></b> amavis-users@amavis.org <br> <b><span style="font-weight: bold;">Στάλθηκε:</span></b> 4:17 μ.μ. Τρίτη, 6 Μαρτίου 2012<br> <b><span style="font-weight: bold;">Θεμα:</span></b> Re: DKIM and Amavis<br> </font> </div> <br>> Is it possible to handle DKIM via amavis?<br><br>Yes, since version 2.6.0, with some improvements in later versions.<br><br>> If so, is it possible to sign only SASL
authenticated outgoing messages? <br>> My setup is postfix + Amavis +opendkim.<br><br>Signing can be enabled/disabled by a policy bank, so the idea is to let<br>an MTA route messages which should be signed to a dedicated content<br>filtering port, where the policy bank can adjust the settings accordingly.<br><br>With version 2.7.0 the $enable_dkim_signing can be adjusted<br>by a policy bank:<br><br>- settings $enable_dkim_verification and $enable_dkim_signing are now<br> dynamic, i.e. became members of policy banks, thus facilitating<br> selectively enabling or disabling these features on a policy bank basis;<br><br><br>For example:<br><br>$enable_dkim_signing = 0;<br><br>$interface_policy{'10026'} = 'ORIGINATING';<br><br>$policy_bank{'ORIGINATING'} = {<br> originating => 1,<br> enable_dkim_signing => 1,<br>}<br><br><br>With earlier versions the same can be accomplished through<br>a @dkim_signature_options_bysender_maps
setting, which was<br>always dynamic (i.e. configurable through policy banks).<br><br><br>> If so, is it possible to sign only SASL authenticated outgoing messages? <br><br>Btw, even without any special settings, amavisd generates DKIM signatures<br>only for non-spam messages with $originating flag on, which (depending<br>on an MTA setup) only applies to authorized mail submission, either<br>through client's IP address being in @mynetworks, or for authenticated<br>(e.g. SASL) roaming users.<br><br> Mark<br><br>Mark, I am impressed...<br>Let me put it in a simpler context, in order to see if I understood that correctly.<br>1. It is possible<br>2. In order to do so, I need to copy/paste your example<br><br>And finally (I need your help here):<br>3. Configure Postfix to write the ORIGINATING header?<br><br> </div> </div> </div></body></html>