Today I found that some sites behind a PIX/ASA firewall with "smtp protocol fixup" would not accept DKIM signed mails.
Solution: ========= master.cf: nodkim unix - - - - - smtp -o smtp_header_checks=pcre:/etc/postfix/no_dkim.pcre main.cf: transport_maps = cdb:/etc/postfix/transport and in /etc/postfix/transport: mrnaz.com nodkim: /etc/postfix/no_dkim.pcre contains: /^DKIM-Signature:/ IGNORE # this strips a DKIM Signature -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 [email protected] | http://www.charite.de
