On 04/19/14 18:56, Phil Stracchino wrote:
> On 04/19/14 15:17, Phil Stracchino wrote:
>> How can I configure OpenDKIM such that it will sign messages originated
>> by internal hosts which reverse-resolve as babcom.com hosts? Or to put
>> that another way, what I want is a way to tell OpenDKIM that internal
>> hosts are *allowed* to send mail as x.caerllewys.net even if their
>> internal IP reverse-resolves as x.babcom.com.
>
> I think I just figured out how to do this. It looks as though what I
> need to do is use ExternalIgnoreList.
...and no, that does not appear to be entirely working. I'm still
seeing this message:
Apr 19 19:26:41 epsilon3 opendkim[12316]: 2EDFFA34B1: external host
babylon5.babcom.com attempted to send as caerllewys.net
The DKIM-Signature does, however, appear to be being added now even
though I'm still getting the external host warning. When I send test
messages out and reflect back in, though, I'm getting an authentication
error because the key was not found, which is peculiar...
--
Phil Stracchino
Babylon Communications
phils_at_caerllewys.net
phil_at_co.ordinate.org
Landline: 603.293.8485
Received on Sun Apr 20 2014 - 00:45:53 PST