[Rspamd-Users] Disable DKIM signature for mailing lists

[Achim Lammerts]

Hello list,

I was run into the same problem with this list here and couldn't find a 
working solution for preventing rspamd signing DKIM for a list of 
recipients.

But you could do a workaround with your MTA, here an example with Postfix:

In /etc/postfix/master.conf add a new delivery option for outbound emails.

...

10465     inet  n       -       y -       -       smtpd
   -o syslog_name=postfix/nomilter
   -o smtpd_tls_wrappermode=yes
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_tls_auth_only=yes
   -o 
smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination,reject
   -o smtpd_sasl_security_options=noanonymous,noplaintext
   -o smtpd_sasl_tls_security_options=noanonymous
   -o smtpd_recipient_restrictions=
   -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
   -o milter_macro_daemon_name=ORIGINATING
   -o smtpd_milters=
   -o non_smtpd_milters=

...

Restart Postfix, open that port in your firewall, i. e. iptables.

iptables -A INPUT -p tcp -m tcp --dport 10465 -j ACCEPT
ip6tables -A INPUT -p tcp -m tcp --dport 10465 -j ACCEPT

Now you're able to send messages via 10465 instead standard SSL port 465 
which are not processed by rspamd.

Regards, Achim

Am 07.07.20 um 18:12 schrieb Ihor Antonov:
> Hi,
>
> A lot of mailing lists forward emails and thus ruin my DKIM signature.
> My Inbox fills in with MAILER-DAEMON reports about DKIM signature 
> mismatch when, all of them from recipients who got my message through 
> some mailing list.
>
> I wonder if there is an easy way to configure Rspamd to NOT sign 
> outgoing emails if it is being sent to a mailing list?
> I don't mind maintaining the list of exemptions manually.
>
> Thanks!
>
> Ihor Antonov