On Mon, 2005-06-27 at 16:13 +0300, Sorin Pop wrote:
> Hello
>
> I want to know if somebody is interested in helping me make a patch
> for adding DomainKey support to qmail-scanner. I am asking this since
> there is a perl library (Mail::DomainKeys) that for the moment (only)
> checks for a valid DK signature of an incoming mail, but since
> qmail-scanner can also check outgoing mails, I guess it isn't hard to
> make it add the domainkey signature.
Yep, I thought about doing this briefly some time ago... but then I
didn't follow it through. I was wondering if SA would check that
already, and simply score the email appropriately...
> The only problem that I can think of now, is how to determine if
> mail is delivered local, or it is delivered remote (to sign it or to
> check it), since --local-domains isn't good enough. I was thinking of
> some way to read the domains from rcpthosts and know which domains are
> local (will check the signature) and which are not (will have to sign
> them). Also to check if the mail is sent from local to local and sign
> it, afterwards check it :))))
Perhaps the simplest method is this:
if ($RC == 1)
{
# @domains is a list of the domains for which we have a key
foreach($domain (@domains))
{
if ($emailfrom =~ /^$thisdomain$/)
{
signemail($email)
}
}
}
This way, we encrypt ALL emails (incoming or outgoing) which have RC set
(ie, we 'trust' this user) and also claim to be from an domain for which
we have an appropriate encryption key.
Initially simply checking for a valid key on incoming mail could be
useful though...
Regards,
Adam
--
--
Adam Goryachev
Website Managers
Ph: +61 2 9345 4395 [EMAIL PROTECTED]
Fax: +61 2 9345 4396 www.websitemanagers.com.au
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
