pki smtprelay.abzw.de cert "/etc/smtpd/tls/smtprelay.abzw.de.crt"
pki smtprelay.abzw.de key "/etc/smtpd/tls/smtprelay.abzw.de.key"

table creds file:/etc/smtpd/creds

filter "dkimsign" proc-exec "filter-dkimsign -d abzw.de -d codehal.de -s lok01 -k /etc/smtpd/dkim_rsa4096.key" user dkimsign group dkimsign

listen on eth0 port 465 smtps pki smtprelay.abzw.de auth <creds>
listen on eth0 port 587 tls-require pki smtprelay.abzw.de auth <creds>
listen on 127.0.0.1 port 10027 tag DKIM_SIGNED filter "dkimsign"

action "relay_dkim" relay host smtp://127.0.0.1:10027
action "relay" relay

match tag DKIM_SIGNED for any action "relay"
match from mail-from "@abzw.de" auth for any action "relay_dkim"
match from mail-from "@codehal.de" auth for any action "relay_dkim"
match from any auth for any action "relay"