Questions tagged [opendkim]

Open source implementation of the DKIM (Domain Keys Identified Mail). The capabilities include signing and verifying DKIM signature of the email.

Filter by
Sorted by
Tagged with
0 votes
1 answer
249 views

opendkim not singing my outgoing emails ubuntu 20.04

i'm following this tutorial to integrate opendkim and sign my emails,i'm not much in ubuntu but i configured everything as the tutorial but the emails is sent without dkim signing I'm hitting the wall ...
Amir Eix's user avatar
0 votes
1 answer
196 views

How to Drop emails in OpenDKIM that are unsignable?

We have developers who like to do things their own way, regardless of advice given. One of these is to send emails with completely bogus sender-addresses I'd like to get OpenDKIM to reject or drop ...
Criggie's user avatar
  • 2,320
0 votes
2 answers
175 views

Forwarding email message breaks DKIM

I have problem with postfix, DKIM and forwarding messages. In almost every article about DKIM I’m reading that “if I do not modify any fields in message header, DKIM signature should still be valid ...
user71061's user avatar
  • 501
0 votes
1 answer
106 views

Something sends email to OpenDKIM even after purging it

I can't send email from my server using Postfix. The /var/log/mail.log has: postfix/local[1803]: 59367CDB9: to=<[email protected]>, orig_to=<opendkim>, relay=local, delay=0.03, delays=0....
Mohammed Baashar's user avatar
2 votes
2 answers
334 views

Add Multiple Subdomains In Signing Table And Key Table Opendkim

I need some major help adding multiple subdomains in the signing table and key table for opendkim without listing them one by one. If I have 50 subdomains I want to add, it will take me forever. I am ...
Digital Joe George's user avatar
0 votes
2 answers
184 views

Opendkim can not find domain key (No such file or directory)

I am building a mailserver with postfix, dovecot and opendkim using Ubuntu 22 LTS. Everything worked fine in my dev environment (same setup as far as I checked), but when I deployed it live, opendkim ...
Amauri Gabriel's user avatar
0 votes
1 answer
62 views

what comes first smtpd milters or cleanup in order of filtering in postfix?

Based on the documentation of the postfix (as stated here: 'https://www.postfix.org/SMTPD_PROXY_README.html') the smtpd milters should be used to filter the emails first and then the cleanup service ...
Ayush Gupta's user avatar
0 votes
1 answer
175 views

Milter Application Error Postfix Email Server

I am trying to sign the emails on my email server with opendkim but I am running against an error that I just can't seem to fix. The error I am getting is: warning: milter local:opendkim/opendkim.sock:...
Niels Koop's user avatar
0 votes
1 answer
58 views

OpenDKIM not signing e-mails from host10.example.com

I have a server, called host10.example.com which sends administrative e-mails by mailx commands to myself only. These outgoing e-mails need to be signed by OpenDKIM. I have tried many configurations ...
Ned64's user avatar
  • 323
1 vote
1 answer
114 views

How OpenDKIM decides which emails to sign?

In OpenDKIM, what domain does it consider to use when comparing to internal hosts? Do it consider the domain of Return-Path (i.e. envelope MAIL FROM's domain) or header From or HELO's domain.
Ayush Gupta's user avatar
0 votes
0 answers
46 views

What is behaviour of opendkim while verifying an email with multiple dkim signatures?

I am trying to implement DKIM verification using Opendkim and postfix. The doubt I am struck by is what will happen if the email has more than one DKIM signature and one of them fails (as like failed ...
Ayush Gupta's user avatar
1 vote
0 answers
161 views

What are typically the headers which I should oversign?

I am trying to setup MTA using Postfix and using opendkim for dkim signing. When I went through opemdkim documentation it have a field which is named 'OversignHeaders' document describes it as: "...
Ayush Gupta's user avatar
0 votes
1 answer
120 views

What does "--[no]subdomains" option in opendkim-genkey mean?

Based on the documentation --nosubdomains "Disallows subdomain signing by this key". But didn't we need to create separate DKIM records for subdomains regardless? Please correct me if I am ...
Ayush Gupta's user avatar
0 votes
0 answers
77 views

Postfix not signing mail with OpenDKIM

Postfix is not signing outgoing mail with OpenDKIM despite giving no errors. My main.cf file readme_directory = /usr/share/doc/postfix inet_protocols = ipv4 meta_directory = /etc/postfix ...
root-louis's user avatar
0 votes
0 answers
215 views

OpenDKIM gets installed without RSA-SHA256 support

I compiled opendkim from source with the following commands: mkdir /opt/opendkim cd /opt/opendkim wget https://sourceforge.net/projects/opendkim/files/opendkim-2.10.3.tar.gz tar -xzvf opendkim-2.10.3....
daydr3amer's user avatar
-1 votes
1 answer
90 views

DKIM *seems* to be used as an open relay. Is this possible?

I'm running postfix with opendkim. My opendkim milter is running on port 10029. CORRECTION: My opendkim milter is running on a unix socket, and there is a DKIM content filter set up on port 10029. ...
HippoMan's user avatar
  • 220
3 votes
1 answer
316 views

How to make postfix sign non-delivery notifications with DKIM?

I have set up my "postfix" server to sign outgoing messages with DKIM and verified that it works correctly for SMTP users using authentication. However, "non-delivery notifications"...
mist's user avatar
  • 33
0 votes
1 answer
104 views

OpenDKIM & OpenDMARC on SLES 15 SP2

Hello is it possible to install OpenDKIM & OpenDMARC on SLES 15 SP2 through the default repository of OpenSUSE?
manwithamission's user avatar
0 votes
1 answer
72 views

OpenDkim - PHPMailer - Failure OpenDkim

my dkim configuration was working just fine. Im working with an email marketing app, pretty simple, normally i used to send the campaign with a Sender ID that is my domain company, and for the From ...
Luis Alfredo Serrano Díaz's user avatar
0 votes
2 answers
800 views

opendkim milter not launching on proper server socket

The following error impeded the restart of opendkim × opendkim.service - OpenDKIM Milter Loaded: loaded (/lib/systemd/system/opendkim.service; enabled; vendor preset: enabled) Active: failed ...
Jerome's user avatar
  • 217
-1 votes
1 answer
362 views

mail relay routing FROM domain with dkim

Current setup First of all i must say that im so so (read like "nothing know") in things like postfix or open dkim. We have many domains on our exchange (realy a lot). and thats work like &...
Dopler's user avatar
  • 1
0 votes
1 answer
644 views

opendkim-testkey: key not secure (file permissions are good and TrustAnchorFile config setting is set)

If I run sudo opendkim-testkey -d mydomain.com -s selector -vvv, I get opendkim-testkey: using default configfile /etc/opendkim.conf opendkim-testkey: checking key 'selector._domainkey.mydomain.com' ...
Robert K S's user avatar
1 vote
0 answers
132 views

OpenDKIM on Fedora Server, opendkim-testkey loads the key, says it's checking it, then just says "query failed" How do I find (and fix) what's wrong?

On Fedora Server 37 (updated as of about February 1, 2023), a new OpenDKIM installation was performed (it's version v2.11.0). The configuration included creating a signing table and a key table, and ...
Richard T's user avatar
  • 1,242
0 votes
0 answers
116 views

Configurating DKIM and SPF, key not secured

On a Ubuntu 20.04 VPS, installing opendkim via sudo apt install opendkim opendkim-tools proceeds as expected, following the steps provided here. However, upon testing, while e-mails get sent in ...
Jerome's user avatar
  • 217
2 votes
0 answers
353 views

OpenDKIM on MTA not signing mails from remote mail servers

I have a configuration where we have one MTA responsible for sending emails from a number of internal servers. The internal servers all run Postfix on a number of different domains. They are all ...
btongeorge's user avatar
0 votes
0 answers
961 views

How to correctly configure OpenDKIM with Postfix on Debian 11?

The desired settings are to create a multi domain mail server. This is my main domain example.com and this is my subdomain: mail.example.com Taking the rDNS as the following verifications: hostname -f ...
J. Mick's user avatar
  • 101
0 votes
1 answer
94 views

Postfix Sendonly Multiple Domains - smtp Auth for each domain?

My title pretty much sums it up I have recently setup a sendonly postfix server i used this guide https://www.linuxbabe.com/mail-server/postfix-send-only-multiple-domains-ubuntu#generate-dkim-keypair ...
Chayne's user avatar
  • 1
0 votes
1 answer
105 views

Postfix OpenDKIM unable to sign outbound email

I configured OpenDKIM following the guidelines here: https://www.linuxbabe.com/mail-server/setting-up-dkim-and-spf Rather than generate keys I used those already configured on our domain, that were ...
btongeorge's user avatar
1 vote
3 answers
695 views

How destination mail server can know the DKIM selector

It is possible to set a "subdomain" in DKIM DNS record name. This "subdomain" is called a selector. It allows to have multiple DKIM keys for the same domain. There is something I ...
Bob5421's user avatar
  • 361
0 votes
0 answers
58 views

SendMail Bounce Back Missing Send To Address in Transcript

SendMail bounce back response is showing a blank To address. How can I correct this so the bounce back includes the To address? This began occurring after installing opendkim on the server and before ...
Dorothy's user avatar
  • 179
1 vote
0 answers
89 views

Postfix: getting 50 or more copies of the same email from specific senders

I have a Postfix (2.10.1) / Dovecot server running on Centos 7. From specific servers I get about 50 copies of the same email every weekend, I tried a wireshark but it uses STARTTLS so its all ...
Jeremy's user avatar
  • 11
2 votes
1 answer
267 views

Postfix / OpenDKIM config on Centos8

I've setup Postfix with Dovecot as an integrated mail service for my SaaS app, it worked great as an inbox. The issue started when I started to send emails, it was not signed so I went ahead and ...
Marius Terblanche's user avatar
0 votes
0 answers
2k views

DKIM_INVALID in Spamassassin only for emails sent from other emails in the same server

I have postfix/dovecot running with spamassassin on Centos. PROBLEM: The VPS acts as a mail server Spamassassin edits the email subject and adds [SPAM} Ms. Outlook on Windows moves those emails to ...
Pikk's user avatar
  • 349
1 vote
0 answers
582 views

Why are my mails failling body hash verification?

Since a few weeks, mails sent via my mailserver at the-grue.de fail dkim authentification. That's very strange, because I'm not at all aware of any changes on my part... mxtoolbox checked the mail, ...
Markus Grunwald's user avatar
-1 votes
1 answer
874 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
Sandaru Akalanka's user avatar
1 vote
3 answers
10k views

Can't open PID file /run/opendkim/opendkim.pid (yet?) after start: Operation not permitted

i am about 2 hours on configure dkim with postfix on ubuntu 20.04. I try absolutly everything, but dkim wont work. OpenDKIM-Service won´t start: root@mail:~# service opendkim status ● opendkim.service ...
nils50122's user avatar
5 votes
1 answer
943 views

Why doesn't dkim sign the letter?

I have configured DKIM: Dec 27 11:10:03 mailer opendkim[378]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf) Dec 27 11:10:10 mailer postfix/postfix-script[551]: warning: symlink leaves ...
Oleksandr's user avatar
  • 161
1 vote
1 answer
614 views

OpenDKIM & Mailman

I have a small mail server based on Fedora with postfix, OpenDKIM, spamassassin and mailman. OpenDKIM signature for outgoing emails works OpenDKIM verification for incoming emails works When a DKIM ...
Matteo's user avatar
  • 477
2 votes
1 answer
589 views

Exim Unable to Read DKIM Key

Exim is spitting out (what looks like) a privilege error: # tail -n1 /var/log/exim/paniclog 2021-11-15 16:38:35.955 [682275] 1mme43-002rUN-QV unable to open file for reading: /etc/opendkim/keys/...
frankplow's user avatar
  • 121
1 vote
1 answer
1k views

Configuring postfix and opendkim socket value

I have the following line in my /etc/postfix/main.cf smtpd_milters=inet:127.0.0.1:8891 inet:127.0.0.1:8893 So then What should I put for Socket in /etc/default/opendkim or /etc/opendkim.conf ?
user17130130's user avatar
5 votes
1 answer
9k views

1024 or 2048 bit keys for DKIM?

Referencing this: https://crypto.stackexchange.com/questions/72297/recommended-key-size-for-dkim What I get from this is (at the time) DNS providers (usually) allow for up to 1024 bit keys but not ...
Tyler Montney's user avatar
4 votes
1 answer
2k views

How to validate opendkim generated RSA keys

I'm trying to diagnose OpenDKIM validation errors (see this question). Way down in the belly of the beast, I'm at the point where I'm trying to make sure the keys generated are actually correct. I'm ...
philolegein's user avatar
2 votes
0 answers
742 views

How to diagnose opendkim RSA signatures

I'm having an issue where my DKIM signatures are failing everywhere. There was a question on this here, but the original poster answered his own question, and the answer seems unrelated. After some ...
philolegein's user avatar
1 vote
2 answers
1k views

OpenDKIM-provided tools do not provide a usable key-pair for DKIM

I use opendkim-genkey -b 2048 -t -s default -d mydomain.com, resulting in files default.private and default.txt. Yes, default.private begins (correctly, SFAIK) with -----BEGIN RSA PRIVATE KEY----- and ...
Eric Dynamic's user avatar
0 votes
1 answer
190 views

opendkim: Restore /etc/default/opendkim to original values

I accidentally overwrote my /etc/default/opendkim while changing the configuration. How can I restore it to the "factory defaults"? I already tried uninstalling and re-installing the package....
Yván Ecarri's user avatar
2 votes
1 answer
3k views

Is DKIM/ARC working properly on my Mailman server?

I've set up a Mailman 3 server with Postfix. I've configured Postfix to add DKIM headers using OpenDKIM and a test email from that server to a Microsoft-hosted email address suggests that DKIM is OK: ...
Philip Colmer's user avatar
3 votes
1 answer
3k views

Sendmail authenticating with DKIM but Roundcube is not authenticating

So I have set up the mail server, Roundcube, and Sendmail both work as expected. but many of my emails were going to spam in Gmail and others, so I was setting up the DKIM auth and it was successful. [...
Ryan Vogel's user avatar
1 vote
0 answers
286 views

Postfix from rewriting (smtp_generic_maps) + DKIM

We have SMTP server for the application emails what should do following: change “From” for all emails sign emails with DKIM I have set up postfix rewriting with smtp_generic. The default flow is ...
Juhani 's user avatar
1 vote
1 answer
779 views

DKIM signing for subdomain issue

I am in an environment that sends emails from different sources. We're a Google Workspace environment as well. The flow is as such: A user ([email protected]) in Gmail sends an email to an email group (...
Phyxiis's user avatar
  • 11
1 vote
1 answer
689 views

Mistake with DKIM 9936A801ED08: no signing table match for using wildcard

I have configured DKIM to be used with wildcards in SigningTable (Centos7) But it gives me an error, and I am not able to see it. Feb 15 08:46:56 monitor01 postfix/submission/smtpd[3374]: connect from ...
abkrim's user avatar
  • 416