paxton
/
mailcow
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
mailcow/data/conf/rspamd/local.d/dkim_signing.conf

36 lines
1.7 KiB
Plaintext
Raw Normal View History

Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# If false, messages with empty envelope from are not signed
[Rspamd] Allow empty envfrom for system mails, add only Dovecot to sign_networks and sign by header when sign_networks fires. ARC remains active for forwards. Result: fully signed and trusted forwards and signed rejects in sieve.
2020-01-12 19:21:21 +08:00
allow_envfrom_empty = true;
Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# If true, envelope/header domain mismatch is ignored
[Rspamd] Allow empty envfrom for system mails, add only Dovecot to sign_networks and sign by header when sign_networks fires. ARC remains active for forwards. Result: fully signed and trusted forwards and signed rejects in sieve.
2020-01-12 19:21:21 +08:00
allow_hdrfrom_mismatch = true;
Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# If true, multiple from headers are allowed (but only first is used)
allow_hdrfrom_multiple = true;
# If true, username does not need to contain matching domain
allow_username_mismatch = true;
# If false, messages from authenticated users are not selected for signing
Update dkim_signing.conf (#3685)
2020-08-01 01:46:39 +08:00
sign_authenticated = true;
Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# Default path to key, can include '$domain' and '$selector' variables
path = "/data/dkim/keys/$domain.dkim";
# Default selector to use
selector = "dkim";
# If false, messages from local networks are not selected for signing
sign_local = true;
# Symbol to add when message is signed
symbol = "DKIM_SIGNED";
# Whether to fallback to global config
try_fallback = true;
# Domain to use for DKIM signing: can be "header" or "envelope"
use_domain = "envelope";
# Whether to normalise domains to eSLD
Do not use sld for DKIM signing
2017-05-05 01:12:21 +08:00
use_esld = false;
Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# Whether to get keys from Redis
Use Redis for DKIM keys, define any selector, auto-merge old keys to Redis and fallback to files
2017-05-05 16:35:27 +08:00
use_redis = true;
Change DKIM to new method, add clamav forced action when virus is found"
2017-04-26 02:32:36 +08:00
# Hash for DKIM keys in Redis
Use Redis for DKIM keys, define any selector, auto-merge old keys to Redis and fallback to files
2017-05-05 16:35:27 +08:00
key_prefix = "DKIM_PRIV_KEYS";
# Selector map
Deleted two http maps, replaced by redis multimaps, much better tag system
2017-05-08 21:39:33 +08:00
selector_prefix = "DKIM_SELECTORS";
[Rspamd] Allow empty envfrom for system mails, add only Dovecot to sign_networks and sign by header when sign_networks fires. ARC remains active for forwards. Result: fully signed and trusted forwards and signed rejects in sieve.
2020-01-12 19:21:21 +08:00
# Sieve is in sign_networks only
# forwards are arc signed, rejects are dkim signed
sign_networks = "/etc/rspamd/custom/dovecot_trusted.map";
use_domain_sign_networks = "header";
[Rspamd] Sign Disposition-Notification Headers (#4020) * [Rspamd] Sign Disposition-Notification Headers Add more Headers to DKIM signing * Update dkim_signing.conf
2021-04-03 18:43:20 +08:00
sign_headers = "from:sender:reply-to:subject:date:message-id:to:cc:mime-version:content-type:content-transfer-encoding:content-language:resent-to:resent-cc:resent-from:resent-sender:resent-message-id:in-reply-to:references:list-id:list-help:list-owner:list-unsubscribe:list-subscribe:list-post:list-unsubscribe-post:disposition-notification-to:disposition-notification-options:original-recipient:openpgp:autocrypt";