--- a/xml/dnsbl.in	Tue Oct 24 09:17:10 2017 -0700
+++ b/xml/dnsbl.in	Fri Nov 03 09:57:13 2017 -0700
@@ -25,7 +25,7 @@
 
     <refentry id="@PACKAGE@.1">
         <refentryinfo>
-            <date>2017-08-18</date>
+            <date>2017-11-03</date>
             <author>
                 <firstname>Carl</firstname>
                 <surname>Byington</surname>
@@ -390,7 +390,8 @@
                     user", and the dns lists are not checked.
                 </para></listitem>
                 <listitem><para>
-                    If the answer is white, and the envelope from domain name is
+                    If the answer is white, the mail is not from localhost,
+                    and the envelope from domain name is
                     listed in the current (or parents) filtering contexts dkim_from with
                     "required_signed", we downgrade this white answer to unknown.
                     If the answer is still white, mail to this recipient is accepted and the dns
@@ -461,6 +462,11 @@
                 messages from being blocked by the dnsbl or content filtering.
             </para>
             <para>
+                If the mail is from localhost we skip the following dkim checks, since
+                such mail will never be dkim signed. This is typically mail that is generated by
+                apache forms.
+            </para>
+            <para>
                 If content filtering is enabled for this body, we look for dkim_signer
                 and dkim_from sections in the current context and parents. We collect the
                 signers of this message from the header added by the dkim-milter. If any
@@ -773,7 +779,7 @@
 
     <refentry id="@PACKAGE@.conf.5">
         <refentryinfo>
-            <date>2017-08-18</date>
+            <date>2017-11-03</date>
             <author>
                 <firstname>Carl</firstname>
                 <surname>Byington</surname>