# ----- Main settings -----
acl_smtp_rcpt = accept logwrite = rcpt_acl: macro: _DKIM_SIGN_HEADERS
-acl_smtp_dkim = accept logwrite = dkim_acl: signer: $dkim_cur_signer bits: $dkim_key_length h=$dkim_headernames
+acl_smtp_dkim = check_dkim_sig
acl_smtp_data = accept logwrite = data_acl: dkim status $dkim_verify_status
dkim_verify_signers = $dkim_signers
log_selector = -dkim +dkim_verbose +received_recipients
+# ----- ACL
+begin acl
+
+check_dkim_sig:
+ warn logwrite = dkim_acl: signer: $dkim_cur_signer bits: $dkim_key_length \
+ h=$dkim_headernames status: $dkim_verify_status
+ accept
+
# ----- Routers
begin routers