Simon Brereton:
> On 4 November 2011 15:49, Simon Brereton <[email protected]>
> wrote:
> > Hi
> >
> > Amavis checks both incoming and outgoing mail. ?DKIMPROXY signs
> > outgoing mail (sadly, before Amavis, so amavis verifies the signature
> > - but I'm okay with that for now) on the submission port.
> >
> > Mail that is injected (i.e. from CRON, applications, etc), still
> > passes through amavis (obviously) but doesn't get signed. ?I would
> > like to sign those mails as well.
> >
> > As I was writing this, it occurred to me that the way to do that is to
> > add the content filter in master.cf
> >
> > ? -o content_filter=dksign:[127.0.0.1]:10028
> >
> > I think I need to add that to the pickup line - is that correct? ?If
> > not, where do I add it so that mails that are injected are added?
>
> Well in the absence of any one telling me not to be stupid, I went
> ahead and tried that. It wasn't a miserable failure, but it didn't do
> anything.
First, you can add -o content_filter to the pickup daemon only if
your content filter is based on SMTP otherwise you get an infinite
loop.
Second, you need to add the same -o content_filter information as
with the smtpd line. There is nothing magical about filters, except
perhaps that DKIMPROXY expects to see message headers that the
pickup daemon cannot provide.
Wietse
> If anyone has any pointers on how to do this (or if you'd like to tell
> me it's not possible and why) that would be great.
>
> Thanks.
>
> Simon
>