RE: What am I missing here?

A csl (comma-separated list) is processed by direct string matching, so unless you're sending mail literally to *_at_aol.com, it won't match.

Try putting *_at_aol.com into a file, and then refer to it using "refile", thus:

DontSignMailTo refile:/etc/mail/opendkim/dontsign

...and then in /etc/mail/opendkim/dontsign, put:

*_at_aol.com

-MSK

From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of Diffenderfer, Randy
Sent: Thursday, January 27, 2011 2:53 PM
To: opendkim-users_at_lists.opendkim.org
Subject: What am I missing here?

Folks,

I have this config item in opendkim 2.2.2:
## DontSignMailTo dataset
## default (none)
##
## Gives a list of recipient addresses or address patterns whose mail should
## not be signed. Wildcard ("*") characters are allowed.

# DontSignMailTo addr1,addr2,...
DontSignMailTo csl:*_at_aol.com

I want to *not* sign mail destined for anybody at aol.com. With this in play, I'm still signing mail to aol.

WTH? What am I missing???

On a separate note (the backstory for this), does anyone have trouble with aol.com verifying failures? Google (and others) think my signatures are just fine, AOL says nyet. Hence the "ok, so I won't sign to you guys" approach (ADSP not draconian to cause message droppage here).

Thanks,
rnd
Received on Fri Jan 28 2011 - 00:50:54 PST