Hello, I am a bit curious about this:
I run a smtpd_milter to sign mail via OpenDKIM. This happens before-queue, right? Next this signed mail goes through a Spamassassin content-filter, which adds some X-Headers after-queue. How can this mail still have a valid DKIM signature? Don't get me wrong, that's what I want. Both relaxed and simple header canonicalization algorithm seem to not care about added X-Headers. Is this by design? Or am I missing something in Postfix' architecture? This is my listener for mail submission: 10587 inet n - - - - smtpd -o smtpd_upstream_proxy_protocol=haproxy -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_restrictions=check_sender_access,hash:/etc/postfix/smime_sender_access -o content_filter=spamassassin -o smtpd_milters=inet:127.0.0.1:5432 Thanks! André
smime.p7s
Description: S/MIME cryptographic signature