On 11.09.24 09:11, natan via Postfix-users wrote:
   The problem is with DKIM signing when I try to reply to a message
   and the external recipient has DMARC verification

   If I have a p=none policy in DMARC it works correctly but if
   p=reject it is known - the message is rejected due to an error for
   DKIM Because DKIM also signs the subject and it is changed by sieve

what error exactly happens here? Does the remote server refuse your e-mail from your smtp server?

W dniu 11.09.2024 o 11:34, Matus UHLAR - fantomas via Postfix-users pisze:
how and when do you DKIM-SIGN yourt outgoing mail? This looks like you first sign outgoing mail and then modify it so DKIM signature gets invalidated.

On 11.09.24 15:01, natan via Postfix-users wrote:
user send e-mail via server "only for send" smtp.domain.ltd
smtp.domain.ltd have postfix:

FYI you should use example.com, example.net or other reserved domain name instead of randomly selected example.com


...
milter_protocol = 2
milter_default_action = accept

smtpd_milters = inet:localhost:12301
non_smtpd_milters = inet:localhost:12301

this milter should DKIM-sign messages your users send.

....

e-mail go to my phisical separate machine (MX) like mx.domain.ltd

...
virtual_transport = lmtp:inet:10.12.12.1:24
...
and via lmt go to klaster dovecotdirector (i have 20 dovecot nodes)

any dovecot via nfs connect to storage

and any user have own sieve and sieve add headders
The sieve filter has individual exceptions and a set of dependencies set

Of course, this is an additional safeguard that can help



--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
   One OS to rule them all, One OS to find them,
One OS to bring them all and into darkness bind them
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to