I was finding that with the latest upgrade to Trixie DKIM signing was failing and mails were moved to junk or quarantined. Apparently when RSPAMD decides if you are allowed to adapt DKIM Signing, the account you are logging on with must be in the same domain. so [email protected] can only sign for domain1.tld and not for domain2.tld which they also own. Since I have multiple clients who are using domain aliases, or receive everything in their one mailbox and sent via identities for their other domains. and than the logging would state that you are not allowed to sign for another domain. You can resolve this with a setting which basically allows you to sign for any domain within the server, but with multiple clients that is not what you want.. So after a tip I received from @till in another thread to try AI for these tasks I thought to try this, and came with the following solution: https://github.com/BSteelooper/ispconfig-DKIMSigningAllDomainsForClient This modifies the rspamd logic to see if a mailbox user is from a set of domains for which he can send messages. To keep this updates I had it made an ISPConfig plugin which adds hooks on the mailbox pages to update the map on changes. Now client1 which has 3 domains and 6 users can use all domains from their respective account without the need for multiple mailboxes.. Feel free to use it, or to ignore it
