TG Servers:
> Hi,
>
> is there a way in postfix to disable milters for outoging to mail to
> dedicated IPs, or better, dedicated recipient addresses?
> I am just fed up from fixing DKIM signatures to a way that it is
> insecure just to get mail accepted from several mailing list
> implementations because they are munging headers to death.
Instead of disabling Milters, you could remove the DKIM signature
upon delivery.
/etc/postfix/transport:
transport_maps = hash:/etc/postfix/transport
/etc/postfix/transport:
recipi...@example.com smtp-strip-dkim:
other.example smtp-strip-dkim:
/etc/postfix/master.cf:
smtp-strip-dkim unix .. .. .. .. .. smtp
-o smtp_header_checks=pcre:/etc/postfix/strip-dkim-header-checks
/etc/postfix/strip-dkim-header-checks:
/^dkim-signature:.+d=my\.domain;/ ignore
The d=my.domain part is optional. In an unrelated use case, I use the
following rule when forwarding email:
!/^(message-id|date|received|subject|from|to|cc|reply-to):/ ignore
Wietse
> And I don't want to get away from reject policy, too, because it is only
> a problem with several mailing lists.
> For postfix mailing list this is fine but munging headers like subject
> etc. like others do I won't fix with globally not signing these headers
> anymore.
> I just want to disable DKIM signing completely now for the mailing lists
> I use, so not call the milter for them.
>
> Thanks.
>
>
>
