Re: howto sign all mails

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Tue, 29 Jun 2010 14:48:10 -0700 (PDT)

On Tue, 29 Jun 2010, Andreas Schulze wrote:
> again I'm playing with opendkim. Last days I tried to sign all mail
> which passes my MTA no matter which sending domain is used.
> I only like to 'label' the messages, that they had passed my MTA.
>
> so I wrote this opendkim.conf:
> Domain andreasschulze.de
> Selector 2010
> Keyfile /opt/opendkim/keys/2010._domainkey.andreasschulze.de.private
> MTA ORIGINATING
>
> but this signs only, if the sender is _at_andreasschulze.de
> I does *not* sign other mails although they passed also (authenticated) via
> this postfix smtp-server:

Right, you've told it to sign only for andreasschulze.de, so that's what
it's doing.

You have a few ways to do what you're asking. See the DATA SETS section
of the opendkim(8) man page for the full set of options. Some quick
examples:

(1) List all of the domains you want to sign explicitly in the
configuration file, as a comma separated list, e.g.:

         Domain domain1,domain2,domain3,...

(2) Make a file that contains them all:

         Domain /etc/mail/opendkim/signing-domains

     ...and in /etc/mail/opendkim/signing-domains:

         domain1
         domain2
         domain3
         ...

(3) Make a file that contains a regular expression that matches any
domain:

         Domain refile:/etc/mail/opendkim/signing-domains

     ...and in /etc/mail/opendkim/signing-domains:

         *

(4) (Prior to v1.2.0 and starting again with v2.1.2, out next week):

         Domain *

Let me know if you need more help.

-MSK
Received on Tue Jun 29 2010 - 21:48:36 PST