Banyasz Botond:
> Hi,
>
> I have an issue with message_drop_headers. I want to hide the Received
> header and i have dk-milter set in smtpd_milters. If i set
> message_drop_headers=bcc, content-length, resent-bcc, return-path,
> received then the signature is broken (domainkeys=fail (bad sig)), if i
> leave the default value, then the signature is correct.
>
> The running postfix version is 3.1.3.
If you remove headers that are required by the DKIM signature, then
verification will fail.
> The documentation says: Names of message headers that the cleanup(8)
> daemon will remove after applying header_checks(5) and before invoking
> Milter applications. If i understand correctly first the header is
> removed then the milter filter is invoked.
Indeed. If the DKIM check happens in a Milter, then the check will
see the message minus the removed headers.
Wietse