From cd25e791171d9289f2293cc071a0f6f2476da1a5 Mon Sep 17 00:00:00 2001
From: Pierre Jaury <pierre@jaury.eu>
Date: Wed, 23 Nov 2016 20:23:07 +0100
Subject: [PATCH] Do not try to sign mails coming from wan addresses

---
 rmilter/rmilter.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rmilter/rmilter.conf b/rmilter/rmilter.conf
index 8bba80f2..991adf9b 100644
--- a/rmilter/rmilter.conf
+++ b/rmilter/rmilter.conf
@@ -124,7 +124,8 @@ dkim {
   header_canon = relaxed;
   body_canon = relaxed;
   sign_alg = sha256;
-  auth_only = no;
+  auth_only = yes;
+  sign_networks = 127.0.0.1, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8, [::1]/128;
 };
 
 # .try_include /overrides/rmilter.conf