On Sun, 3 Jun 2007, David Gibbs wrote:
>> What do you have as Milter.macros.envfrom in /etc/mail/sendmail.cf?
>
> O Milter.macros.envfrom=i, {auth_authen}

For a message to be signed, dkim-filter requires both (a) the domain of 
the sender to be one that gets signed, and (b) the origin of the SMTP 
connection to be one for which signing is done.  Setting aside (a) for a 
moment, (b) is true if at least one of these is true:

(1) the message is injected from an MTA explicitly listed with "-m"
(2) the message has a macro set as described with "-M"
(3) the {auth_type} macro is set and not empty
(4) a POPAUTH query succeeds and finds a match
(5) the message came from an IP address listed by "-i"

(Of course, for "-m", "-M" and "-i", their matching configuration file 
versions are also checked.)

It looks like you've removed {auth_type} from the list of macros that the 
MTA passes to the filter by default, so it has no idea whether 
authentication has succeeded.

You can either restore that macro to the data that's fed to the filter, 
which would satisfy (3) above, or use a macro test ("-M") to check for an 
{auth_authen} value, which would satisfy (2) above.

-MSK

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to