Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] Compiling milter-greylist 4.3.4 with DKIM ?

2010-02-28 by Michael Mansour

Hi Emmanuel,

> Michael Mansour <mic@...> wrote:
> 
> > Grep'ed through all their sources for dkim_init, couldn't find any of them
> > that had it?
> 
> That suggests there have been different dkim packages?

I've spent about half a day working through this problem and finally have it
compiling into milter-greylist.

To compile milter-greylist with DKIM support, I need the libdkim library.
ATrpms supplies this package (1.0.19) however as we discovered over the past
few days, it doesn't contain the dkim_init within the libdkim.a file or the
dkim.h header files:

# nm /usr/lib/libdkim.a|grep -i dkim_init
#

and:

# grep -i dkim_init /usr/include/dkim.h
#

What I did was download the dkim-milter tarball, ran through a build (read the
INSTALL docs), and then pulled those files out directly:

/root/test/dkim-milter-2.8.3/obj.Linux.2.6.18-164.11.1.el5xen.i686/libdkim/dkim.h

/root/test/dkim-milter-2.8.3/obj.Linux.2.6.18-164.11.1.el5xen.i686/libdkim/libdkim.a

Copied them over the ones contained in the libdkim RPM, so I now have:

# nm /usr/lib/libdkim.a|grep -i dkim_init
00003bb0 T dkim_init

# grep -i dkim_init /usr/include/dkim.h
**  DKIM_INIT -- initialize the DKIM package
extern DKIM_LIB *dkim_init __P((void *(*mallocf)(void *closure, size_t nbytes),
**      libhandle -- library handle, returned by dkim_init()
**      libhandle -- library handle, returned by dkim_init()

I then was able to successfully compile the milter-greylist RPM with DKIM support.

I've now installed the updated milter-greylist 4.3.4 on my mail servers, with
the following rules in place:

dacl whitelist dkim pass
dacl blacklist dkim fail

I'm monitoring this and so far it's run this way for some hours and I'm yet to
see the rules hit.

I'm now trying to block emails from gmail.com that don't have DIM signatures
(since all legitimate emails from gmail.com do). Would the following rule work?

dacl blacklist from /.*@...$/ dkim none

Thanks.

Michael.

> -- 
> Emmanuel Dreyfus
> http://hcpnet.free.fr/pubz
> manu@...
> 
> ------------------------------------
> 
> Yahoo! Groups Links
> 
> 
>

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.