Looking at the man page it looks liek here i should place a list of FQDN
whose mail is meant to be signed, right? But it also states that this
setting is not taken into account on the signing decision, so i'm
completely lost here. What makes more sense here, typing the local host
FQDN, placing list of trusted hosts unique FQND or leaving it as is?
MTA (dataset)
A set of MTA names (a la the sendmail(8) DaemonPortOptions
Name parameter) whose mail should be signed by this filter. There is no
default, meaning MTA name is not considered when making the sign-verify
decision.
Although OpenDKIM seems to be working fine i would liek to clear this up.
Thanks a lot for your patience,
On Thu, Feb 13, 2014 at 12:21 PM, Pau Peris <pau_at_webeloping.es> wrote:
> Thanks a lot,
>
> when i first configured OpenDKIM i was really doubtfull about what value
> should a place here, Googling a bit i ended up with the MSA value but today
> i still don't know which is/are the correct/s value/s to place here for a
> host which send and signs email for multiple hosts and domains. Based on
> your experienced, what do you think is the best setting here?
>
> Kind regards,
>
>
> On Thu, Feb 13, 2014 at 11:55 AM, Murray S. Kucherawy <msk_at_blackops.org>wrote:
>
>> On Thu, 13 Feb 2014, Pau Peris wrote:
>>
>>> thanks a lot for you explanation. As i understand, the list of FQDNs
>>> you're
>>> talking about are the ones provided by such directive value, right?
>>>
>>> InternalHosts /etc/dkim/trusted-hosts
>>>
>>> As you can see i'm sharing the same file for ExternalIgnoreList
>>> directive.
>>>
>>> ExternalIgnoreList /etc/dkim/trusted-hosts
>>>
>>
>> It's neither of these. I was talking about the "MTA" setting, which in
>> your configuration file contains only the name "MSA", which doesn't match
>> the daemon name your MTA is using. There's thus no match, hence the log
>> file entry.
>>
>> -MSK
>
>
>
>
> --
> *Pau Peris Rodriguez*
> *Chief Executive Officer (CEO)*
> Tel: 669650292
> C/Balmes 211, Principal Segunda
> Barcelona 08006
> http://www.webeloping.es
>
> Aquest correu electrònic conté informació de caràcter confidencial
> dirigida exclusivament al seu/s destinatari/s en còpia present. Tant
> mateix, queda prohibida la seva divulgació, copia o distribució a tercers
> sense prèvia autorització escrita per part de Pau Peris Rodriguez. En
> cas d'haver rebut aquesta informació per error, es demana que es notifiqui
> immediatament d'aquesta circumstancia mitjançant la direcció electrònica
> del emissor.
>
--
*Pau Peris Rodriguez*
*Chief Executive Officer (CEO)*
Tel: 669650292
C/Balmes 211, Principal Segunda
Barcelona 08006
http://www.webeloping.es
Aquest correu electrònic conté informació de caràcter confidencial dirigida
exclusivament al seu/s destinatari/s en còpia present. Tant mateix, queda
prohibida la seva divulgació, copia o distribució a tercers sense prèvia
autorització escrita per part de Pau Peris Rodriguez. En cas d'haver rebut
aquesta informació per error, es demana que es notifiqui
immediatament d'aquesta circumstancia mitjançant la direcció electrònica
del emissor.
Received on Thu Feb 13 2014 - 11:30:28 PST