Benny,
> i like to sign headers
> X-Squirrel-UserHash:
> X-Squirrel-FromHash:
> aswell just unsure how to configure it in amavisd.conf
$signed_header_fields{lc('X-Squirrel-UserHash')} = 1;
$signed_header_fields{lc('X-Squirrel-FromHash')} = 1;
> olso how do i remove signed headers in default amavisd so thay do
> not get signed in dkim ?
> using 2.6.1 now on gentoo
You mean how to avoid signing certain header fields?
$signed_header_fields{'received'} = 0; # turn off signing of Received
You may replace the whole contents of a %signed_header_fields hash
(instead of doing it piecemeal) and assign a new value, if you prefer.
http://www.ijs.si/software/amavisd/release-notes.txt
A QUICK START TO DKIM VERIFICATION
[...]
An associative array %signed_header_fields controls which header fields
are to be signed. By default it contains a standard (RFC 4871) set of
header field names, augmented by some additional header field names
considered appropriate at the time of a release (RFC 4021, RFC 3834).
In addition a 'Sender' header field is excluded because it is frequently
replaced by a mailing list, and as the RFC 2821 mandates there can only
be one such header field the original one is dropped, invalidating a
signature. Also the 'To' and 'Cc' are excluded from a default set because
sendmail mailers are known to gratuitously reformat the list, invalidating
a signature.
The default set of header fields to be signed can be controlled
by setting %signed_header_fields elements to true (to sign) or
to false (not to sign). Keys must be in lowercase, e.g.:
$signed_header_fields{'received'} = 0; # turn off signing of Received
$signed_header_fields{'sender'} = 1; # turn on signing of Sender
$signed_header_fields{'to'} = 1; # turn on signing of To
$signed_header_fields{'cc'} = 1; # turn on signing of Cc
Mark
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
