[Mailman-Users] Giving away the secrets of 99.3% email delivery

[David]

On Sun, May 13, 2012 at 12:51 AM, Mark Sapiro <mark at msapiro.net> wrote:

> David wrote:
> >
> >I have DKIM implemented with opendkim and Postfix and messages sent out
> via
> >sendmail are signed properly.
> >
> >However, messages sent out to the list's users by Mailman are not DKIM
> >signed. Any suggestions?
>
>
> Is Mailman sending outgoing mail via your local Postfix.
>

Yes.


> Why such mail would not be DKIM signed by Postfix when mail submitted
> via the Postfix sendmail command is DKIM signed by Postfix probably
> has to do with the Postfix/opendkim configuration and is not something
> I can answer offhand.
>

If you think of anything, please let me know. I have been reading all the
DKIM related posts I can find, both on this list and other places.

For a mailing list, would I have to expand my SigningTable in any way? My
opendkim SigningTable currently only has an entry for
*@list.example.com(which is associated with list._
domainkey.example.com).

But /var/log/mail.log shows a lot of entries like this:

no signing table match for [some member of the list]
>

So I think signing doesn't take place for messages passing through the list
because of the way I set up my SigningTable. But I didn't find any specific
info on setting up a SigningTable for a mailing list.

The mail log file also shows entries like this:

May 12 21:45:42 localhost opendkim[20976]: 55A4C122C5: DKIM-Signature
> header added
>

Although when I manually inspect emails I receive via the list from other
users they are never DKIM signed. (My own messages are signed -- and I
certainly match the signing table. But I can't match the log entries up to
individual users or to list activity, so far; therefore, a number of things
are still unclear.)

(Similarly, my trusted hosts table is limited to my own Mailman/Postfix
server. But I can't imagine it would be wise to change that.)