--On Saturday, June 04, 2016 9:34 AM -0400 Wietse Venema
<wie...@porcupine.org> wrote:
zimbra@edge02e:~/common/conf$ cat tag_as_originating.re
/^/ FILTER smtp-amavis:[127.0.0.1]:10026
I have no idea what that regexp is about. I do know, however,
how I sign sendmail(1) submission with Postfix and opendkim.
This is something I believe you helped me with a few years ago. ;) It is
used in smtpd_sender_restrictions:
smtpd_sender_restrictions = check_sender_access
lmdb:/opt/zimbra/conf/postfix_reject_sender, check_policy_service
inet:localhost:10031, check_sender_access
regexp:/opt/zimbra/common/conf/tag_as_originating.re, permit_mynetworks,
permit_sasl_authenticated, permit_tls_clientcerts, check_sender_access
regexp:/opt/zimbra/common/conf/tag_as_foreign.re
to mark items as either originating or foreign. If they are originating,
it gets passed off to Amavis and then OpenDKIM.
To sign sendmail(1) submission with a Milter, I have configured
non_smtpd_milters as shown below. That's how this posting got signed.
non_smtpd_milters = inet:127.0.0.1:9998
For sendmail(1) submission, the cleanup server's Milter client
creates a fake SMTP session from localhost/127.0.0.1/AF_INET (sorry,
not yet configurable). In order to enable signing, that IP address
is configured in my opendkim InternalHosts setting.
Ok. I may just update our script to submit to port 25 using a normal SMTP
session instead. I guess there is no "non_smtpd_sender_restrictions" I
could use. ;)
--Quanah
--
Quanah Gibson-Mount
Platform Architect
Manager, Systems Team
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
A division of Synacor, Inc
