Postfix and amavisd-new

[Birta Levente]

On 12/11/2014 12:24, Olivier Nicole wrote:
> Hi,
>
> I am making undue gray hairs on a problem between Postfix and
> amavisd-new.
>
> I have a setting on FreeBSD that is working like a charm, when I send
> myself a message , Postfix authenticates me, receives the message and
> pass it to amavis on the port that set originating (the messages
> originating from mynetwork, for outgoing messages), so that the message
> will receive DKIM stamp.
>
> The headers look like:
>
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.ait.ac.th; h=
> 	content-transfer-encoding:content-type:content-type:subject
> 	: blah blah
> X-Virus-Scanned: amavisd-new at cs.ait.ac.th
> Received: from mail.cs.ait.ac.th ([127.0.0.1])
> 	by mail.cs.ait.ac.th (mail.cs.ait.ac.th [127.0.0.1]) (amavisd-new, port 10026)
> 	with ESMTP id HNCE3McbymrL for <on at cs.ait.ac.th>;
> 	Wed, 12 Nov 2014 16:53:59 +0700 (ICT)
> Received: from [192.41.170.57] (olivier.cs.ait.ac.th [192.41.170.57])
> 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
> 	(No client certificate requested)
> 	by mail.cs.ait.ac.th (Postfix) with ESMTPSA id 58911160B0C
> 	for <on at cs.ait.ac.th>; Wed, 12 Nov 2014 16:53:59 +0700 (ICT)
>
> I am trying to replicate the same setting on a Debian machine and cannot
> get it to work: after Postfix has authenticated the sender, the message
> is pased to amavisd-nre on port 10024 (the port used for incoming
> messages).
>
> Headers are like;
>
> Received: from mail.bknix.co.th ([127.0.0.1])
> 	by localhost (mail.bknix.co.th [127.0.0.1]) (amavisd-new, port 10024)
> 	with ESMTP id ywEMEA3eM_Dn for <on at bknix.co.th>;
> 	Wed, 12 Nov 2014 16:50:58 +0700 (ICT)
> Received: from [203.159.32.35] (unknown [203.159.32.35])
> 	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
> 	(No client certificate requested)
> 	by mail.bknix.co.th (Postfix) with ESMTPSA id 4425120C2E
> 	for <on at bknix.co.th>; Wed, 12 Nov 2014 16:50:53 +0700 (ICT)
> Message-ID: <54632D77.60501 at bknix.co.th>
>
> I must be making a very stupid mistake, but I cannot get enough global
> view of the problem to solve it, so any idea or pointer is most welcome.
>
>
Maybe

$enable_dkim_signing = 1;    # load DKIM signing code, keys defined by 
dkim_key

or

$policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our 
users

....
     enable_dkim_signing => 1,
....

};


-- 
            Levi