skip opendkim and spf check for outbound mail from internal source

General eFa discussion
Post Reply
tobiasp
Posts: 13
Joined: 15 Nov 2020 10:42

skip opendkim and spf check for outbound mail from internal source

Post by tobiasp »

Hi,
I'm using EFA also as an outbound mail relay - so it delivers the mail from different sources in the internal network to the outside. is it possible to deactivate opendkim / spf checks for mails that originate in defined internal networks (like the ones defined unter Mail Settings->Outbound mail relay)? because the spf header for mails originating from an internal source is always "fail"

edit:
I found /etc/opendkim/TrustedHosts and added the internal range there
also enabled ExternalIgnoreList and InternalHosts option in /etc/opendkim.conf

and I set
IgnoreHosts /etc/opendmarc/ignore.hosts
in /etc/opendmarc.conf
and added the network to the ignore.hosts file

but the mails still got the header assinged so I also set my network in
PeerList in /etc/opendkim.conf
instead...

after

Code: Select all

systemctl restart opendkim
systemctl restart opendmarc
postfix reload
the header is not added anymore!

maybe this is something the efa config interface should add automatically to these files if you set something under outbound mail relay?

Cheers,
Tobias
Post Reply