[Rspamd-Users] Disable DKIM signature for mailing lists

Tim Cutts tim at thecutts.org
Tue Jul 7 18:23:48 UTC 2020

DKIM and SPF are fundamentally fairly hostile to mailing lists.  There are some gross hacks to get around it; I run a number of Mailman list servers, and the solution mailman offers is to strip out any incoming DKIM signatures, re-write the headers so that the mail appears to come from the list server itself, and then re-signs with new DKIM headers.  That fixes both DKIM and SPF problems from the forwarded emails.  In other words, they’re not really forwarded at all, but new emails with fresh signatures.  The downside is the recipients can no longer reply direct to the sender of the email.

I realise this doesn’t fix your problem, but it’s probably worth educating the list owners if you know them.



> On 7 Jul 2020, at 17:12, Ihor Antonov <ihor at antonovs.family> wrote:
> Hi,
> A lot of mailing lists forward emails and thus ruin my DKIM signature.
> My Inbox fills in with MAILER-DAEMON reports about DKIM signature mismatch when, all of them from recipients who got my message through some mailing list.
> I wonder if there is an easy way to configure Rspamd to NOT sign outgoing emails if it is being sent to a mailing list?
> I don't mind maintaining the list of exemptions manually.
> Thanks!
> Ihor Antonov
> -- 
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users

More information about the Users mailing list