[exim] Re: How to enable incoming DKIM check, ideally in Ubu…

Top Page
Delete this message
Reply to this message
Author: Slavko
Date:  
To: exim-users
Subject: [exim] Re: How to enable incoming DKIM check, ideally in Ubuntu/Debian?
Ahoj,

Dňa Sat, 23 Sep 2023 11:30:02 +0200 Mario Emmenlauer via Exim-users
<exim-users@???> napísal:

> I'd like to reject emails that are not sent from a valid DKIM-enabled
> sender.


Do not do that. Failed DKIM is the same as no DKIM at all (by RFC) and
here is a lot reasons why legitimate email can have broken DKIM
signature. By my experiences, all SPAM has either valid or no
signature...

If you really want that, do it on per domain base. Create DB of "must
pass" domains and reject those only, but once again, prone to false
positives...

regards

--
Slavko
https://www.slavino.sk

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/