Dnia 2012-04-27, pią o godzinie 14:41 +0100, Michael J. Tubby B.Sc G8TIC
pisze:
> In my acl_check_dkim I have these tests first:
>
> #
> # strict checking on known signers...
> #
> deny sender_domains = +dkim_known_signers
And that's my point - as far as I know sender_domains is taken from
envelope not from From: header. Hence when From: headers' content is
spoofed but envelope-sender is not, signature won't be checked even if
From: is in dkim_known_signers list.
Regards,
--
Robert Wysocki
administrator systemów linuksowych
CONTIUM S.A.,
http://www.contium.pl