On 2 Mar 2009 at 11:01, Dave CROCKER wrote:
> Folks, > > I believe there was only one response to Murray's query. His request > was not from idle curiosity. > > Murray S. Kucherawy wrote: > > This is probably of particular interest to those of you who are > > familiar with the internals of DKIM, i.e. the standard document and > > thus the protocol itself, but everyone is invited to participate. > > > > Are there any portions of DKIM you feel are not useful to you? That > > is, are there things in DKIM which, if they weren't there to begin > > with, wouldn't make a difference to you? Or, on the flipside, are > > there some things outside of the obviously mandatory features which > > without which you would consider DKIM not useful? Or possibly, are > > there some features you're not using now but you plan to use in the > > future? Following is a combined list of the features that I use on a Postfix installation supporting several mail domains. I had some issues when trying to implement DKIM on a single process processing all mail, but after splitting it into three processes handling outgoing preprocessing, outgoing signing, and incomming, things have been running quite smothly. ADSPDiscard Yes ADSPDiscard No ADSPNoSuchDomain Yes ADSPNoSuchDomain No AlwaysAddARHeader No AlwaysAddARHeader Yes Background Yes Canonicalization simple/simple DontSignMailTo ExternalIgnoreList InternalHosts KeyList Mode s Mode v OmitHeaders X-Spam On-BadSignature On-DNSError On-Default On-InternalError On-NoSignature On-Security On-SignatureMissing RemoveOldSignatures No RemoveOldSignatures Yes SendReports Yes SignatureAlgorithm rsa-sha256 SubDomains Yes Syslog Yes SyslogFacility local1 SyslogSuccess Yes UMask 017 X-Header Yes On the single system there were issues with determining which outgoing mail to sign, and which incomming mail to check. I did get it working with a lot of help from Murray, but it was a bit fragile. Other than the debuging bits, I currently don't plan to use any of the other features. The area that needed the most help, was installation on a non-sendmail system. Quite a bit of frustration trying to get all of the necessary bits to get a clean complile. ...don dhughes (at) microtechniques.com White Plains, NY ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
