On Mon, 18 Feb 2019 at 10:51, Andrey Repin <anrdae...@yandex.ru> wrote: > I just discovered that mail generated locally (i.e. introduced by pickup > daemon) is not signed. > > Digging in documentation, I've found > http://www.postfix.org/postconf.5.html#non_smtpd_milters > But its description made me reluctant to enable it straight away. > > And then there's rather old post on SO https://serverfault.com/a/547778/208335 > which says that even if it's enabled, the reports generated by postfix itself > will still not be signed. > > Is there a recommended way of solving this?
Using non_smtpd_milters works fine for me. I'm not sure about the reports issue, but try to ensure that they are not sent from an address that is subject to DMARC restrictions.
