Indeed, form [2001:db8::]/32 worked, while others not. I didn't see that in documentation. However in the code,file ./opendkim/util.c there is a commentary /* try it with square brackets */ which suggest it should try both versions. And a single IPv6 indeed works without any brackets. While for IPv6 it works only with square brackets, at least on my setup.
On Sat, 13 Nov 2021 13:12:12 +0100 David Bürgin <dbuer...@gluet.ch> wrote: > Control: severity -1 normal > > > OpenDKIM igores IPv6 nets for InternalHosts file. > > For example, specifying 2001:0DB8::/32 or > > 2001:0db8:0000:0000:0000:0000:0000:0000/32 > > while the sender has IP 2001:db8:3604:3::1:1210 > > makes OpenDKIM to skip signing with the message: > > [2001:db8:3604:3::1:1210] not internal > > I didn’t try it myself, but according to the documentation both forms > that you used are not allowed (upper case, uncompressed ‘::’): > > 2001:0DB8::/32 > 2001:0db8:0000:0000:0000:0000:0000:0000/32 > > Can you try one of the following instead, and see if it works? In any > case IPv6 CIDR notation should be supported in OpenDKIM. > > 2001:0db8::/32 > 2001:db8::/32 > [2001:0db8::]/32 > [2001:db8::]/32 >
