Banyasz Botond: > Hi, > > I have an issue with message_drop_headers. I want to hide the Received > header and i have dk-milter set in smtpd_milters. If i set > message_drop_headers=bcc, content-length, resent-bcc, return-path, > received then the signature is broken (domainkeys=fail (bad sig)), if i > leave the default value, then the signature is correct. > > The running postfix version is 3.1.3.
If you remove headers that are required by the DKIM signature, then verification will fail. > The documentation says: Names of message headers that the cleanup(8) > daemon will remove after applying header_checks(5) and before invoking > Milter applications. If i understand correctly first the header is > removed then the milter filter is invoked. Indeed. If the DKIM check happens in a Milter, then the check will see the message minus the removed headers. Wietse