Michael,

> Conflicting, not clear suggestions on amavisd-new site about dkimmilter
> vs proxy for outgoing signing, MTA is postfix. (are you suggesting to
> use milter or proxy?

I used dkim-milter until recently, but switched to a pure- amavisd solution
for dkim signing and verification last week. I never tried the dkimproxy,
although the underlying module it uses (Mail::DKIM) is sound (same as used
by my current amavisd and by SpamAssassin DKIM plugin) and the solution is
fine, but requires passage of mail through an extra daemon, which is a bit 
cumbersome.

> Instead of signing mail with /dkim-milter/, the same can be achieved by
> using Jason Long's /DKIM Proxy/, which is a Perl program calling a Perl
> module /Mail::DKIM/, i.e. the same modules as used by a SpamAssassin
> DKIM plugin. As the /Mail::DKIM/ turned out to be a reliable and quite
> efficient module, this may be a good alternative to /dkim-milter/ (which
> is also quite good in recent versions).

Right.

> My assumption on proxy is that is takes up ram, sits in background, and
> needs at least one for each amavisd server.

Correct.

> I was using dkimmilter, but upon upgrading from FBSD 5.5 to 6.2, it
> somehow broke, so I am revisiting it.

A verifying dkim-milter on 64-bit platforms (at least on FreeBSD 6.2)
keeps crashing once a day or two. Murray can reproduce the problem,
but so far the issue remains unresolved - for weeks now. The same milter
runs fine on the same version of OS in 32-bit mode. This is one of the
reasons I'm moving away from dkim-milter.

> (worked fine on amavisd-new, used it in the MY_NETS policy) but now,
> since it won't even start anymore, I decided to look at milters.
> Any thoughts? ideas?

dkim-milter is running fine on several hosts nearby on FreeBSD 6.2
in i386 mode. It is also running fine doing signing-only on amd64.
It is the verification on amd64 that is broken somewhere (possibly
in the underlying multithreading sendmail milter library, it crashes
on a new connect under certain circumstances).

  Mark


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to