Noel Jones schrieb:
Robert Schetterer wrote:
i cant deliver out disposition-notification mails produced by
> exchange/outlook to a special recipient domain
( guess the smtp content inspector there has a problem only with this
type of mails if they are dkim signed, but that speculate )
If you can verify DKIM is the problem, you can strip the DKIM signature
for that domain only. (Use a master.cf alternate smtp transport with -o
smtp_header_checks to strip DKIM headers for that domain.)
all other mails are delivered dkim signed
to that domain
its only disposition-notification mails delivered in via sasl to postfix
relay from outlook/exchange servers from dynips
which are timimng out
so it might be some content filter there which has an exactly meaning
what this mails exactly should look like ( and dislike any addiditional
headers dkim whatever = bug), would be no problem if they give some
reject/advice but this mails simply timeout and stay in queue
But it seems unlikely DKIM is the problem if it's only DSNs that are
affected... You can test with hand-crafted messages and use
mini_sendmail or similar to send test messages with and without DKIM
directly to the problem host.
Maybe you can simply not offer DSN support to them when they send mail
to you.
http://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keyword_address_maps
The table entry would look like this, note the key must be an IP, not a
hostname:
ip.of.bad.client dsn, silent-discard
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
