DKIM signature with two domains in PMG

[sancheli]

Hello
How to make a DKIM signature with two domains in PMG?
When we release a letter from quarantine, heder is added there postmaster@mydomain1.com and the receiving server defines the email as spam

attach a piece of the log where the check fails

X-Mailru-Dmarc-Auth: dmarc=fail header.from=alex@mydomain2.com
X-Mras: PROBABLE_SPAM
X-Spam: undefined
Authentication-Results: mxs.mail.ru; spf=pass (mx226.i.mail.ru: domain of mydomain1.com designates as permitted sender) smtp.mailfrom=postmaster@mydomain1.com smtp.helo=pmg01.mydomain1.com; dmarc=fail header.from=alex@mydomain2.com

 

[Stoiko Ivanov]

I'd suggest to add your PMG as trusted relay to your downstream server...

regarding the DKIM signature - mails originating from PMG (e.g. when releasing from quarantine) are sent with an empty envelope-sender (to prevent bounces to PMG) - and those are currently not signed

I hope this explains it!

 

[sancheli]

Thank you, this explained a lot why letters issued from quarantine fall into the spam folder of clients.
Please tell me if it is possible to sign DKIM letters from quarantine in any other way?

I also ask you to suggest whether we can choose which heders will be signed by DKIM? Or use the DKIM signature side of the application?

 

[Stoiko Ivanov]

Please tell me if it is possible to sign DKIM letters from quarantine in any other way?

before PMG got support for DKIM a few users installed a dkim-signing milter and configured it inside the postfix configuration - this might be more flexible

to edit the postfix config in PMG you need to use the templateing system:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_template_engine

I also ask you to suggest whether we can choose which heders will be signed by DKIM?

the header list is hard-coded - why would you want to sign other headers? (asking as I haven't yet heard of a use-case for making it configurable):
https://metacpan.org/pod/Mail::DKIM::Signer
and:
https://git.proxmox.com/?p=pmg-api....f1412477781dd8345da67dad0d02412d6;hb=HEAD#l92

I hope this helps!