Re: [dkim-milter-discuss] Testing non-signed mail using dkim-milter

[Murray S. K. <ms...@se...>]

On Wed, 28 May 2008, Lucas Brasilino wrote:
> Yes, it is. The first one I've just ran dkim-filter testing a mail in a 
> local file (mbox file)... the second one I've ran as a daemon talking to 
> postfix through a unix domain socket, and I've posted the logs of the 
> receiving MTA.

Ah, I understand.  In fact all you're doing is running the simulation 
("-t") and live modes (without "-t") but really testing the same feature 
in each case.

"no=r" is definitely broken.  I'm aiming to have it fixed in a near-future 
release.  Unfortunately doing the fix cleanly is a little complicated so 
it may not make it into 2.6.0 (which is already in Beta), but I'll try.

If your goal is to reject any mail that's not DKIM-signed, you'll need to 
wait for the fix.  On the other hand, if you want to reject mail that 
wasn't DKIM-signed but should've been according to the sending domain's 
policy, that feature is available in the current code (check out the 
"ASPDiscard" configuration file item).

-MSK