Author: Ian Eiloart Date: To: Pedro Mansilla CC: exim users Subject: Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On 13 Sep 2011, at 01:17, Pedro Mansilla wrote:
> What I actually need is to know how to get both active. Regardless of the
> version I need to have both DK & DKIM to sign out all emails.
Use Exim 4.69 to sign with DK, and the latest version of Exim to add a DKIM signature. Use smarthost facility to transfer mail between the two. However, you should not let untrusted systems (including authenticated MUAs) speak directly to Exim 4.69 since later versions have security fixes.
local MUA -> latest Exim adds DKIM -> Exim 4.69 adds DK sig -> remote MTA
remote MTA -> latest Exim checks DKIM -> Exim 4.69 checks DK -> local delivery
It's going to be complicated.
Which country are you in?
--
Ian Eiloart
Postmaster, University of Sussex
+44 (0) 1273 87-3148
