I have postfix, dovecot, opendkim and postsrsd installed. I am trying to forward mail from email@example.com to firstname.lastname@example.org, and have them signed with DKIM.
I use postsrsd in order for the SPF record to pass for the forwarded emails.
However, when I send an email from my icloud account to email@example.com, the message is delivered to my gmail inbox, but it is not being signed by DKIM.
Here is an output of my log:
postfix/smtpd: connect from st11p01im-asmtp001.me.com[18.104.22.168] postfix/smtpd: BC23640B53: client=st11p01im-asmtp001.me.com[22.214.171.124] postsrsd: srs_forward: <firstname.lastname@example.org> rewritten as <SRS0=zgyz=HTemail@example.com> postfix/cleanup: BC23640B53: message-id=<firstname.lastname@example.org> opendkim: BC23640B53: st11p01im-asmtp001.me.com [126.96.36.199] not internal opendkim: BC23640B53: not authenticated opendkim: BC23640B53: no signature data
I have looked at http://seasonofcode.com/posts/setting-up-dkim-and-srs-in-postfix.html and all my configuration files appear to be correct.
From what I have seen online, the "not internal, not authenticated" message means that the domain is not present in
/etc/opendkim/TrustedHosts, but the domain being listed in the logs (st11p01im-asmtp001.me.com) is not my domain. I believe me.com belongs to Apple.
Is DKIM signing with an alias address using SRS not possible?
Having disabled postsrsd in /etc/postfix/main.cf, the problem still persists. Therefore, the issue is not with postsrsd, but with opendkim not signing mail for aliases addresses.
I think this is because opendkim looks at the original hostname that send the mail, which in my case is st11p01im-asmtp001.me.com, and therefore does not sign it because this address is not listed in
Is there any way to get opendkim to work with alias addresses?