From: Janet N <ja...@gm...> - 2007-10-18 23:57:35
|
Hi there, Is there a way to support multiple domains using different keys? I want to support multiple keys for multiple domains using domain keys filter. I've noticed in the "dk-filter.c" file that I can use " -k" to load multiple keys the same way you would do for the KeyList in Dkim keys milter. I've added the following to the filter m4 file: APPENDDEF(`confENVDEF', `-D_FFR_MULTIPLE_KEYS ') I've rebuild the filter and started the daemon as: daemon ${DKFILT} -l -p inet:8892 -c nofws -D -k -s /etc/mail/milter/domainkeylist -u mailnull -i /etc/mail/milter/internalhosts -H -P /tmp/${DKID}.pid My domainkeylist file contains: *@test.com:test.com:/etc/mail/keys/887849037 and when I started up the dk-filter daemon it complains: Starting dk-filter: dk-filter: test.com:/etc/mail/keys/887849037: open(): No such file or directory Any feedback is appreciated. |
From: Murray S. K. <ms...@se...> - 2007-10-19 18:11:47
|
On Thu, 18 Oct 2007, Janet N wrote: > My domainkeylist file contains: > *@test.com:test.com:/etc/mail/keys/887849037 The multiple key support in dk-filter is older than that for dkim-filter so the format is a little different. Specifically, you can't specify a signing domain; dk-filter assumes the signing domain is the sender's domain and just uses that. Try: *@test.com:/etc/mail/keys/887849037 |
From: Janet N <ja...@gm...> - 2007-10-19 22:09:25
|
Hi Murray, I got multiple keys signing for multiple domains working now :) I've looked at your dk-filter.c file and noticed the domainkeylist should contain two field like how you stated below. Also, I've created a file which contain a list of domains, started the dk-filter daemon with a "-d <domain list filename path> and everything works. Thanks. On 10/19/07, Murray S. Kucherawy <ms...@se...> wrote: > On Thu, 18 Oct 2007, Janet N wrote: > > My domainkeylist file contains: > > *@test.com:test.com:/etc/mail/keys/887849037 > > The multiple key support in dk-filter is older than that for dkim-filter > so the format is a little different. Specifically, you can't specify a > signing domain; dk-filter assumes the signing domain is the sender's > domain and just uses that. > > Try: > > *@test.com:/etc/mail/keys/887849037 > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > dk-milter-discuss mailing list > dk-...@li... > https://lists.sourceforge.net/lists/listinfo/dk-milter-discuss > |