Re: [exim] DKIM verification and envelope-from

Top Page

Reply to this message
Author: Robert Wysocki
Date:  
To: Michael J. Tubby B.Sc G8TIC
CC: exim-users
Subject: Re: [exim] DKIM verification and envelope-from
Dnia 2012-04-27, pią o godzinie 14:41 +0100, Michael J. Tubby B.Sc G8TIC
pisze:
> In my acl_check_dkim I have these tests first:
>
>          #
>          # strict checking on known signers...
>          #
>          deny    sender_domains = +dkim_known_signers


And that's my point - as far as I know sender_domains is taken from
envelope not from From: header. Hence when From: headers' content is
spoofed but envelope-sender is not, signature won't be checked even if
From: is in dkim_known_signers list.

Regards,
--
Robert Wysocki
administrator systemów linuksowych
CONTIUM S.A., http://www.contium.pl