From 5c6240e8a8d22c1aeaf2107494c412dfb702b3b5 Mon Sep 17 00:00:00 2001
From: pacien
Date: Mon, 3 Sep 2018 00:39:17 +0200
Subject: Disable DKIM check for trusted relays

---
 conf.d/020_acl.conf | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'conf.d/020_acl.conf')

diff --git a/conf.d/020_acl.conf b/conf.d/020_acl.conf
index 3b1ce2a..d039739 100644
--- a/conf.d/020_acl.conf
+++ b/conf.d/020_acl.conf
@@ -154,6 +154,10 @@ acl_mta_data:
 #   dkim_verify_signers = $sender_address_domain:$dkim_signers
 acl_mta_dkim:
 
+  # Accept all messages from trusted relays and mailing list servers
+  # which may alter messages, rendering DKIM signatures invalid.
+  accept   hosts         = +trusted_relay_hosts
+
   deny     message       = [DKIM] invalid signature ($dkim_verify_reason).
            dkim_status   = fail
 
-- 
cgit v1.2.3