Re: maintenance: mail.dnswl.org

[Benny Pedersen <me@xxxxxxx>]

A. Schulze skrev den 2022-08-15 23:02:
> Am 15.08.22 um 22:42 schrieb Vsevolod Stakhov:
> > Well, my main question is what was wrong with the default headers list 
> > provided by Rspamd. It actually follows all RFC guidelines and 
> > includes oversigning where suggested. Am I missing something here?
>
> rspamd isn't involved at all for messages handled by this list.
> So 'h=' may look different then what rspamd generate.

why is rspamd not used ?

is you sure of this 
https://wiki.centos-webpanel.com/dkim-double-signature ?

> But is something wrong/worse/missing essential?

remember what spamassassin do, a= random algo is not yet stable to use, 
aslong you need to have 2 opendkim.conf with one a= in each then its 
beta feature :)

1: will the hightest signed algo win over the lovest algo ?, what will 
hapend if only the lovest pass ?
2: basicly its not stable if opendkim is in need to be called 2 times, 
how simple is this setup to work ?

just questions :)

would it help if you use fuglu ?, it supports rspamd btw

lastly have you checked mailflow ?, and not at least ORIGINATIN milters 
policy only dkim sign it, when non originating only ARC should be done, 
before breaking dkim :)