Hi Erik,
At 09:18 01-05-2008, Erik Lotspeich wrote:
>I administer mail for my own vanity domain, lotspeich.org.  In my current
>setup, I have both my MTA (Sendmail) and MSA (Sendmail/Submit) configured
>for dkim-milter.  This allows for outgoing mail originating from
>lotspeich.org (via a local MUA such as alpine) to be signed.

You don't need to call dkim-milter from Sendmail/Submit for mail from 
a local MUA to be signed.  Configure dkim-milter in the MTA only.  It 
will sign mail from localhost (Alpine).

>The side-effect of this configuration is that locally-generated e-mail
>destined for a local address (e.g. mail from [EMAIL PROTECTED] destined
>to myself [EMAIL PROTECTED]) will be signed twice and never verified: the
>MSA/dkim-filter will sign the e-mail and the MTA/dkim-filter will sign the
>e-mail.

That's because dkim-milter will be called twice.  Mail cannot be 
verified as it's only going through dkim-milter with the milter 
working as a signer then.

>I would be happy with either of the following solutions:
>
>1. Locally originated/destined mail would never be signed or verified

You can remove localhost from the list of hosts for which mail should 
be signed.  Then locally originated mail won't be signed.  For 
locally destined mail, it's more complicated as it's not one 
recipient per delivery.  As you are using sendmail, it's possible to 
have a hack that would split the delivery per recipient, then set a 
macro to indicate that the recipient is local.

>OR
>
>2. Locally originated/destined mail would be signed and verified

That raises the same questions as in 1.

Regards,
-sm 


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to