[pmg-devel] [PATCH pmg-api 0/6] DKIM sign mails generated by PMG itself.

Stoiko Ivanov s.ivanov at proxmox.com
Tue Feb 25 00:24:45 CET 2025


Since it's now (since 8.1) possible to sign mails based on their From
header we can sign most of the mails PMG generates itself:
* spam- and admin-reports
* notifications from the rulesystem
* backup notifications
* quarantine-link mails
* a specific bounce we generate ourselves.

This series partially addresses:
* https://bugzilla.proxmox.com/show_bug.cgi?id=4658
* https://bugzilla.proxmox.com/show_bug.cgi?id=2971
and fixes
* https://bugzilla.proxmox.com/show_bug.cgi?id=3423

I tested it on my local system, but another set of eyes would be very much
appreciated

Stoiko Ivanov (7):
  config: add admin-mail-from key
  reports: use admin-mail-from as from header
  smtp-engine: use admin-mail-from as from header for bounces
  ruledb: use admin-mail-from where sensible
  dkim: signer: degrade missing domain in from header to info
  reinject_local_mail: sign mails with DKIM based on header

 src/PMG/Backup.pm        |  2 +-
 src/PMG/CLI/pmgreport.pm |  2 +-
 src/PMG/Config.pm        |  6 ++++++
 src/PMG/DKIMSign.pm      |  5 ++++-
 src/PMG/Quarantine.pm    |  1 +
 src/PMG/RuleDB/Notify.pm | 11 ++++++++---
 src/PMG/SMTP.pm          |  7 ++++---
 src/PMG/Utils.pm         | 22 ++++++++++++++++++++++
 src/bin/pmg-smtp-filter  |  1 +
 9 files changed, 48 insertions(+), 9 deletions(-)

-- 
2.39.5





More information about the pmg-devel mailing list