DKIM sign only unsigned

[Benny Pedersen]

On 2020-12-28 18:09, Matus UHLAR - fantomas wrote:

> we have mail gateway where most of internal mail comes already signed, 
> and
> I'd prefer to sign only mail that is not signed already.

+1

> can I dkim-sign only mail that is not already signed?

with policy banks yes

you know how to make that with trusted networks and untrusted networks, 
and xclient ip

equal to how milters in postfix/sendmail is only sign submission/smtps 
and not port 25 this should be easy