Skip to content

feat: DKIM-sign bounce messages (mainly "user does not exist")#964

Merged
hpk42 merged 1 commit into
mainfrom
hpk/sign-bounces
May 12, 2026
Merged

feat: DKIM-sign bounce messages (mainly "user does not exist")#964
hpk42 merged 1 commit into
mainfrom
hpk/sign-bounces

Conversation

@hpk42
Copy link
Copy Markdown
Contributor

@hpk42 hpk42 commented May 11, 2026

closes #873 This is based on, and replaces Jagoda's #874 but comes with a simpler, more robust test. Also takes care to not do dkim-signing for IP-relays.

@hpk42 hpk42 mentioned this pull request May 11, 2026
Copy link
Copy Markdown
Collaborator

@j-g00da j-g00da left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, let's first merge filtermail so the CI passes.

Comment on lines +54 to +55
{% if not config.ipv4_relay %} -o cleanup_service_name=signlocal
{% endif %}cleanup unix n - y - 0 cleanup
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pretty sure this is redundant, IIRC I first tried to hook the cleanup to pickup as every bounce goes through it, but pickup doesn't honor that option and it has to be set in bounce instead.

@j-g00da
Copy link
Copy Markdown
Collaborator

j-g00da commented May 12, 2026

filtermail 0.6.5 -> #966

@hpk42 hpk42 force-pushed the hpk/sign-bounces branch 2 times, most recently from a6b0d99 to 4643b0d Compare May 12, 2026 09:01
This was originally based on Jagoda's #874
but then the postfix config was simplified, and it comes with a simpler and more robust test.
@hpk42 hpk42 force-pushed the hpk/sign-bounces branch from 4643b0d to 0a260d8 Compare May 12, 2026 11:56
@hpk42 hpk42 merged commit 26a13fb into main May 12, 2026
8 checks passed
@hpk42 hpk42 deleted the hpk/sign-bounces branch May 12, 2026 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bounce messages are not signed with DKIM

2 participants