Conflicting, not clear suggestions on amavisd-new site about dkimmilter vs proxy for outgoing signing, MTA is postfix. (are you suggesting to use milter or proxy?
Instead of signing mail with /dkim-milter/, the same can be achieved by using Jason Long's /DKIM Proxy/, which is a Perl program calling a Perl module /Mail::DKIM/, i.e. the same modules as used by a SpamAssassin DKIM plugin. As the /Mail::DKIM/ turned out to be a reliable and quite efficient module, this may be a good alternative to /dkim-milter/ (which is also quite good in recent versions). Under FreeBSD just install mail/dkim-milter from freshly updated ports, and add the following to /etc/rc.conf: milterdkim_enable="YES" milterdkim_uid='dkimfilter' milterdkim_domain='example.com' milterdkim_profiles="verifier signer" milterdkim_verifier_socket='inet:[EMAIL PROTECTED]' milterdkim_verifier_flags='-b v -C dns=a,int=a' milterdkim_signer_socket='inet:[EMAIL PROTECTED]' milterdkim_signer_selector='myselector' milterdkim_signer_key='/var/db/domainkeys/myselector.key.pem' milterdkim_signer_alg='rsa-sha1' milterdkim_signer_flags='-b s -c relaxed/simple -m ORIGINATING -o - -C int=a' Recent startup script supplied by FreeBSD port already ensures that deamon runs under its dedicated username, supplying a default value for option -u. My assumption on proxy is that is takes up ram, sits in background, and needs at least one for each amavisd server. I was using dkimmilter, but upon upgrading from FBSD 5.5 to 6.2, it somehow broke, so I am revisiting it. (worked fine on amavisd-new, used it in the MY_NETS policy) but now, since it won't even start anymore, I decided to look at milters. Any thoughts? ideas? -- Michael Scheidell, CTO >*|*SECNAP Network Security Office: 561-999-5000 x 1259 Direct: 561-939-7259 _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(tm). For Information please see http://www.spammertrap.com _________________________________________________________________________ ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
