[Rspamd-Users] Why does rspamd try to dkmim sign incoming mail?

[Johannes Rohr]

Am 21.08.24 um 14:23 schrieb Andrew Lewis via Users:
> Hi Johannes,
>
> On Wed, 2024-08-21 at 13:55 +0200, Johannes Rohr wrote:
>> These are all from foreign servers, this is all incoming mail.
>> Apparently, rspamd tries to dkim sign them. Why? Can this be turned
>> off
>> somehomw?
> Perhaps `arc` module is enabled but misconfigured (the full log message
> will indicate which module generated the message).
No configuration there.
>
> Or `local_addrs`/equivalent setting is set oddly.
>
> If the message is from `dkim_signing` module then enabling debug
> logging for this module will indicate why a message is selected for
> signing.

Done so. The culprit seems to be this line:

2024-08-21 19:44:34 #3011551(normal) <63b6c2>; dkim_signing; 
lua_dkim_tools.lua:191: mail is from local address

Which is strange, because it is an incoming spam message. For some 
strange reason, the dkim module, after the message has been checked now 
considers it a message from a local network.

I've now set  sign_local to false in 
/etc/rspamd/local.d/dkim_signing.conf. It should make a difference, 
let's see if it does. However, I don't understand why this message is 
considered local by the dkim module.

Johannes



>
> Best,
> -AL.