Disable Mail but have DKIM and Ability to update Return-Path per domain

Support Template

Description

Not sure if this is possible, but basically I run all of my customers sites, and we do not use the email portion of ApisCP, they all have their own email services, outlook, fastmail, etc…

But all of the sites are WooCommerce and send emails out from their sites for order confirmations. So I was trying to set mail.enabled=false, to disable imap/smtp/etc, but that also disables rspamd which is a requirement for DKIM, so outbound emails go into spam.

I have since set mail.enabled=true, and they are back up and working again.

In addition, with mail.enabled=true, SRS takes place, and with mail.enabled=false, no SRS takes place, but the Return-Path is updated to postmaster@virtual-domain. Is it possible to specify the Return-Path on a site-by-site basis.

For example, some of my sites are aaaaa.com, but are sending from bbbb.com which is not a configured domain anywhere in ApisCP, this is causing SPF alignment to fail(it fails also with SRS), but it would be nice to be able to get them both SPF and DKIM working at the same time with mail.enabled=false.

Environment

ApisCP version:

# cpcmd misc:cp-version
revision: 50eca27bdf98f47e978cc66122911e4c0193a82c
timestamp: 1760625243
ver_maj: 3
ver_min: 2
ver_patch: 48
ver_pre: ''
dirty: false
debug: false

Operating System:

# uname -r
4.18.0-513.24.1.el8_9.x86_64

Put those sender domains through a smarthost. Disabling mail is intended to disable mail on the account.

Return-Path is defined from the MAIL FROM command, which is read by the SMTP server. When mail is submitted directly through a local MSA - sendmail in this context - then a Return-Path cannot be inferred as no SMTP protocol is observed. Instead, Return-Path is constructed using the -f user@email argument to sendmail.

Without SRS in place, any mail forwarded that passes through the server automatically fails SPF/DKIM validation.

Thanks Matt, just wanted to double check to see if I wasnt missing anything.