Andrey Repin: > Greetings, All! > > I just discovered that mail generated locally (i.e. introduced by pickup > daemon) is not signed. > > Digging in documentation, I've found > http://www.postfix.org/postconf.5.html#non_smtpd_milters
That's what I use for signing this local submission. > And then there's rather old post on SO https://serverfault.com/a/547778/208335 > which says that even if it's enabled, the reports generated by postfix itself > will still not be signed. I use 'internal_mail_filter_classes = bounce' for that. Maybe that should have finer granularity: it may be OK to inspect bounces with Milters, but it may not be OK with header/body_checks. Wietse
