On Sat, Oct 19, 2013 at 1:10 PM, Alexandre Ellert <aell...@numeezy.com>wrote:
> ** > > My final goal is to have all kind of outbound mails signed by DKIM, > including bounce, auto-reply... And then announce a reject DMARC policy in > DNS > > I already have some kind of separation for inbound/outbound but it's > probably not optimal... > > - A dedicated IP is used for SMTP inbound and an another for users > submission/POP/IMAP. > > - Outgoing mails, sent by users, use a dedicated IP (1 per domain). > > - Everything runs on single machine and actually works :) > > - bounce, and auto-reply are not signed :( > > > This should be enough for signing bounces. main.cf internal_mail_filter_classes = bounce non_smtpd_milters = inet:localhost:8891 You must also update SigningTable in opendkim.conf to match MAILER-DAEMON José Borges Ferreira
