I have separate mail servers for incoming and outgoing mail. I implemented DKIM and Dmarc on my outgoing machine some months ago and that works well.
Yesterday I decided to add DKIM verification to my incoming server, but I have a couple of configuration questions:
1. I'm unsure of the action of On-NoSignature. Does this refer to all unsigned mail or only mail with a DKIM DNS record which is unsigned? If the latter it would be useful against unsigned mail which should be.
2. According to the man page, IP addresses and domains in PeerList should be exempt from verification, but if I set On-NoSignature to reject my periodic daily mails are blocked even though I list my domain name and host and jail IP addresses in PeerList.
Any ideas?
Yesterday I decided to add DKIM verification to my incoming server, but I have a couple of configuration questions:
1. I'm unsure of the action of On-NoSignature. Does this refer to all unsigned mail or only mail with a DKIM DNS record which is unsigned? If the latter it would be useful against unsigned mail which should be.
2. According to the man page, IP addresses and domains in PeerList should be exempt from verification, but if I set On-NoSignature to reject my periodic daily mails are blocked even though I list my domain name and host and jail IP addresses in PeerList.
Any ideas?