postfix-users October 2011 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: Content filter after DKIM proxy

Re: Content filter after DKIM proxy

From: Simon Brereton <simon.brereton_at_nospam>
Date: Tue Oct 18 2011 - 19:12:43 GMT
To: postfix-users@postfix.org

On 18 October 2011 15:01, Simon Deziel <simon.deziel@gmail.com> wrote:
> On 10/18/2011 01:41 PM, Simon Brereton wrote:
>> On 18 October 2011 13:27, Simon Deziel <simon.deziel@gmail.com> wrote:
>>> On 10/18/2011 01:12 PM, Simon Brereton wrote:
>>>> Hi
>>>>
>>>> I expect that this is not recommended practice, but before I implemented DKIM signing, Amavis used to scan ALL mail - incoming and outgoing - and I was happy with that.
>>>
>>> I don't know if that's would suites you but Amavis is capable of
>>> performing the DKIM verification/signature steps as well.
>>
>> Thanks.  Yup,  Amavis is checking DKIM signatures, but that's not what
>> I was getting at.  I want Amavis to scan and rate my users out-going
>> mails as well as the incoming ones.
>
> Amavisd-new can do DKIM *signature* too, no need to add another content
> filter for that.
>
> Once properly configured Amavisd-new will perform DKIM verification for
> incoming emails and will DKIM sign your outgoing emails. This goes
> without saying that Amavisd-new will do the usual virus/spam scoring on
> both ways.
>
>> Prior to me implementing
>> dkimproxy, it was doing that.  I've added the amavis content filter to
>> the socket and so far it's doing what I want (i.e. rating out-going
>> mails) but it would be nice to have a sanity check as to whether
>> that's the right way to do it.
>
> As outlined by Noel, the best setup is to have Amavisd-new doing all the
> DKIM related checks and signatures.

Thanks both of you. I had no idea. I'll look into it - it would
certainly make admin easier.

Simon