infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

bastion / opendkim: set mx2.redhat.com in opendkim PeerList

Browse source 
Right now we are getting emails from redhat.com addresses and verifying
DKIM and stripping it off and sending on. We should leave redhat.com
emails coming from mx2.redhat.com alone so their own DKIM will still be
on the emails. This hopefully will allow these emails to be accepted by
google on the other side. Right now they don't have the signature so
google thinks they are trickery.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-05-11 10:48:07 -07:00
parent 34d6657bc1
commit 3289c63588
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/opendkim/files/opendkim.conf
View file

@ -118,6 +118,7 @@ InternalHosts refile:/etc/opendkim/TrustedHosts
## whose mail should be neither signed nor verified by this filter. See man
## page for file format.
# PeerList X.X.X.X
PeerList mx2.redhat.com
## Always oversign From (sign using actual From and a null From to prevent
## malicious signatures header fields (From and/or others) between the signer