maddy

 1# DKIM
 2
 3This is the check module that performs verification of the DKIM signatures
 4present on the incoming messages.
 5
 6## Configuration directives
 7
 8```
 9check.dkim {
10    debug no
11    required_fields From Subject
12    allow_body_subset no
13    no_sig_action ignore
14    broken_sig_action ignore
15	fail_open no
16}
17```
18
19### debug _boolean_
20Default: global directive value
21
22Log both successful and unsuccessful check executions instead of just
23unsuccessful.
24
25---
26
27### required_fields _string..._
28Default: `From Subject`
29
30Header fields that should be included in each signature. If signature
31lacks any field listed in that directive, it will be considered invalid.
32
33Note that From is always required to be signed, even if it is not included in
34this directive.
35
36---
37
38### no_sig_action _action_
39Default: `ignore` (recommended by RFC 6376)
40
41Action to take when message without any signature is received.
42
43Note that DMARC policy of the sender domain can request more strict handling of
44missing DKIM signatures.
45
46---
47
48### broken_sig_action _action_
49Default: `ignore` (recommended by RFC 6376)
50
51Action to take when there are not valid signatures in a message.
52
53Note that DMARC policy of the sender domain can request more strict handling of
54broken DKIM signatures.
55
56---
57
58### fail_open _boolean_
59Default: `no`
60
61Whether to accept the message if a temporary error occurs during DKIM
62verification. Rejecting the message with a 4xx code will require the sender
63to resend it later in a hope that the problem will be resolved.