How to implement signature (using alertMIME) and signing

[Noel Jones]

On 12/19/2011 8:34 PM, Pandu Poluan wrote:
> 
> On Dec 20, 2011 3:21 AM, "Noel Jones" <njones at megan.vbhcs.org
> <mailto:njones at megan.vbhcs.org>> wrote:
>>
>> On 12/18/2011 11:18 PM, Pandu Poluan wrote:
>> > Hello list,
>> >
>> > I'm planning to implement a 'signing' mail server, i.e., a mail
>> > server that adds a signature (disclaimer, actually) plus DKIM
> signature.
>> >
>> > The latter I know can be performed by amavis, while the former
>> > performed by alertMIME.
>> >
>> > The issue that makes this complicated is that I also want to utilize
>> > greylisting (using Postfix's postscreen) and spamfiltering (just in
>> > case the external accounts got cracked).
>> >
>> > I'm guessing the order of processing would be:
>> >
>> > 1. TLS
>> > 2. postscreen greylisting
>>
>> DO NOT use postscreen or greylisting on authorized external mail.
>> To protect against cracked accounts, use postfwd or policyd to
>> implement rate limits.
>>
> 
> Hmmm... okay I can imagine some situations where greylisting can
> introduce problems... thanks for the warning!
> 
> postfwd? Okay, this is the first time I heard about that... any docs?

http://www.postfix.org/addon.html#policy
http://postfwd.org/
http://www.policyd.org/

Both postfwd and policyd have their own mail lists.

>> Disclaimers and DKIM signing can be done in amavisd-new, and much
>> easier than implementing them separately.  Doing them in amavisd-new
>> eliminates the question of "order", since it's handled correctly for
>> you.
>>
> 
> Honestly, that's news to me; I've been reading up on amavisd-new for
> the past two weeks and can't recall ever seeing that amavis can
> append disclaimers. Care to point to some howto's?


Search for altermime in the amavisd-new release notes for basic
instructions.
http://www.ijs.si/software/amavisd/release-notes.txt



  -- Noel Jones