proxmox-mirrors/pmg-api
1
0
Fork 0
mirror of https://git.proxmox.com/git/pmg-api synced 2025-10-04 20:17:33 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

reinject_local_mail: sign mails with DKIM based on header

Browse Source 
as most mails PMG generates locally has an empty envelope-sender,
signing only makes sense when the from-header domain is used as
signing domain.

This fixes #3423, and partially addresses #2971 and #4658 (bounces
generated by postfix directly are not passed through our stack, and
should not be processed in general -  see
https://www.postfix.org/postconf.5.html#internal_mail_filter_classes).

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov 2025-02-25 16:02:02 +01:00 committed by Thomas Lamprecht
parent 98de1f61de
commit cd011e2339
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/PMG/Utils.pm
View File

@ -247,6 +247,21 @@ sub reinject_local_mail {
$params->{mail}->{smtputf8} = $needs_smtputf8; $params->{mail}->{smtputf8} = $needs_smtputf8;
} }
my $dkim_sign = $cfg->get('admin', 'dkim_sign');
if ($dkim_sign) {
my $dkim = {};
$dkim->{sign} = $dkim_sign;
$dkim->{use_domain} = $cfg->get('admin', 'dkim-use-domain');
$dkim->{sign_all} = $cfg->get('admin', 'dkim_sign_all_mail');
$dkim->{selector} = $cfg->get('admin', 'dkim_selector');
eval {
$entity = PMG::DKIMSign::sign_entity($entity, $dkim, $sender);
};
if ($@) {
syslog('warning', "Could not DKIM-Sign local mail: $@");
}
}
return reinject_mail($entity, $sender, $targets, $xforward, $me, $params); return reinject_mail($entity, $sender, $targets, $xforward, $me, $params);
} }