Re: dk-milter 0.4.1 issue

[SM <sm...@re...>]

Hi Jim,
At 21:29 18-07-2006, Jim Popovitch wrote:
>Well, that's an interesting question.  This gets back to my earlier
>confusion about when/how and email is signed.  In my present case (where
>there are 3 interfaces, lo, eth0, eth1) email comes into the SMTP
>gateway on eth0 (a private lan) and is queued by Sendmail.  Then the
>email is distributed to the recipients from the queue via eth1 (a
>publicly available interface).  What I don't understand is where in that
>process should dk-filter sign the email, and how is that configured?  If

There are different methods to tell dk-milter when to sign mail.  One 
of them is to list the IP addresses for which mail should be 
signed.  This is generally localhost and a list of your internal 
hosts.  The second method is to specify the daemon name.

If you are receiving mail through the public interface, then you 
should not configure dk-milter to sign mail going through the MTA 
daemon (public in your case).

I noticed that you are using Thunderbird to send mail.  There is a 
known issue with sendmail which causes DK signature to fail.

Regards,
-sm