<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Sounds good. Thank you for the info.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> amavis-users <amavis-users-bounces+miro.igov=pharmya.com@amavis.org> <b>On Behalf Of </b>Savvas Karagiannidis<br><b>Sent:</b> Friday, January 21, 2022 11:43<br><b>To:</b> amavis-users@amavis.org<br><b>Subject:</b> Re: Remove headers from Amavis<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p>Hello,<o:p></o:p></p><p>You don't really have to remove the already existing DKIM signature headers, just as you do not remove any other headers from the email...<o:p></o:p></p><p>It is normal for a message to have multiple DKIM signature as it hops between servers that sign it.<o:p></o:p></p><p>According to RFC the message will be verified as long as any of the signatures is verified. Signatures that may be invalid are actually ignored in this case.<o:p></o:p></p><p><a href="https://datatracker.ietf.org/doc/html/rfc7489">https://datatracker.ietf.org/doc/html/rfc7489</a> :<o:p></o:p></p><pre> Note that a single email can contain multiple DKIM signatures, and it<o:p></o:p></pre><pre> is considered to be a DMARC "pass" if any DKIM signature is aligned<o:p></o:p></pre><pre> and verifies.<o:p></o:p></pre><pre><o:p> </o:p></pre><div><p>It may not be directly relevant to your question, but just clarifying this...<o:p></o:p></p><p>Regards,<o:p></o:p></p></div><div><p>Savvas Karagiannidis<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>On 21/1/2022 10:35, Miro Igov wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><pre>I am absolutely sure that amavis is the only process signing emails.<o:p></o:p></pre><pre>If i disable amavis from signing $enable_dkim_signing = 0; in my /etc/amavis/conf.d/50-user config file i get only the original signature before reaching my mail server.<o:p></o:p></pre><pre>Imagine <a href="mailto:user@gmail.com">user@gmail.com</a> sends to <a href="mailto:miro.igov@pharmya.com">miro.igov@pharmya.com</a> and <a href="mailto:miro.igov@pharmya.com">miro.igov@pharmya.com</a> is set to forward a copy of the email to <a href="mailto:user@yahoo.com">user@yahoo.com</a><o:p></o:p></pre><pre>In yahoo message i can see google dkim signature. I want google dkim stripped because it reports permfail as obviously message is altered in my amavis setup before forwarded to yahoo.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>-----Original Message-----<o:p></o:p></pre><pre>From: TSHIMANGA Minkoka <a href="mailto:tshikose@tshimix.cd"><tshikose@tshimix.cd></a> <o:p></o:p></pre><pre>Sent: Friday, January 21, 2022 08:03<o:p></o:p></pre><pre>To: Miro Igov <a href="mailto:miro.igov@pharmya.com"><miro.igov@pharmya.com></a>; <a href="mailto:amavis-users@amavis.org">amavis-users@amavis.org</a><o:p></o:p></pre><pre>Subject: Re: Remove headers from Amavis<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Hello,<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>You can stop Amavis from DKIM signing emails by setting $enable_dkim_signing = 1; in /etc/amavis/amavis.conf<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>I think that in your case another process (maybe OpenDKIM) is DKIM signing the email, so you should stop Amavis doing so to avoid double signing.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Regards,<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Tshimanga<o:p></o:p></pre><pre><o:p> </o:p></pre></blockquote></div>
<br><table id="pharmya_gdpr_container" border="0" cellspacing="0" cellpadding="0" width="100%">
<tr>
<td width="600">
<table width="100%" cellpadding="0" cellspacing="0" border="0">
<tr>
<td style="border-top: 2px solid #8C8C8C; text-align:justify;">
<img src="cid:8074d395fec491fc2d0ffc0ccbf2cf64"
class="replace_cid" alt="GDPR Logo" width="126"
height="50" align="left" style="margin-right:5px;"/>
<span style="font-size:10pt;
font-family: Segoe, 'Segoe UI', 'DejaVu Sans', 'Trebuchet MS', Verdana, sans-serif;"
class="gdpr_text">
This message has been sent as a part of discussion between PHARMYA
and the addressee whose name is specified above. Should you receive
this message by mistake, we would be most grateful if you informed
us that the message has been sent to you. In this case, we also ask
that you delete this message from your mailbox, and do not forward
it or any part of it to anyone else.<br>
Thank you for your cooperation and understanding.
</span>
</td>
</tr>
</table>
</td>
<td></td>
</table>
<br></body></html>