I have my server setup exactly like this article here: Getting DKIMproxy installed and configured, yet I am having the following issue.
When I go to send an email to my server through port 587, I get the following in my mail.log:
Sep 1 16:49:38 mailer postfix/smtpd: connect from unknown[xxx.xxx.xxx.xxx] Sep 1 16:49:39 mailer postfix/smtpd: 0B6C5301BC: client=unknown[xxx.xxx.xxx.xxx] Sep 1 16:49:39 mailer postfix/cleanup: 0B6C5301BC: message-id=<88370BFF-B439-4B2B-9AC0-9D8A828B2836@rdny.com> Sep 1 16:49:39 mailer postfix/qmgr: 0B6C5301BC: from=<email@example.com>, size=552, nrcpt=1 (queue active) Sep 1 16:49:39 mailer postfix/smtp: connect to 127.0.0.1[127.0.0.1]:10027: Connection refused Sep 1 16:49:39 mailer postfix/smtp: 0B6C5301BC: to=<firstname.lastname@example.org>, relay=none, delay=0.14, delays=0.14/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10027: Connection refused)
I have /etc/dkimproxy/dkimproxy_out.conf set like the following:
# specify what address/port DKIMproxy should listen on listen 127.0.0.1:10027 # specify what address/port DKIMproxy forwards mail to relay 127.0.0.1:10028 # specify what domains DKIMproxy can sign for (comma-separated, no spaces) # Note that this is set in /etc/init.d/dkimproxy in this Debian package # unactivate it there if you want to use the config file domain mailer.xxx.com # specify what signatures to add signature dkim(c=relaxed) signature domainkeys(c=nofws) # specify location of the private key keyfile /etc/dkimproxy/keys/email.key # specify the selector (i.e. the name of the key record put in DNS) selector mail
And then my /etc/postfix/master.cf has the following appended to it (per the tutorial):
submission inet n - n - - smtpd -o smtpd_etrn_restrictions=reject -o smtpd_sasl_auth_enable=yes -o content_filter=dksign:[127.0.0.1]:10027 -o receive_override_options=no_address_mappings -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject dksign unix - - n - 10 smtp -o smtp_send_xforward_command=yes -o smtp_discard_ehlo_keywords=8bitmime,starttls
What I can't seem to figure out is why I keep getting "Connection Refused" on the port that DKIMproxy should be listening on. Can anyone help me out with this? I don't need to open anything in my firewall, do I? Since it should just be connecting internally on localhost?
I feel like I'm so close to get this working!