Questions tagged [opendkim]

Open source implementation of the DKIM (Domain Keys Identified Mail). The capabilities include signing and verifying DKIM signature of the email.

Filter by
Sorted by
Tagged with
1
vote
1answer
36 views

DKIM signing for subdomain issue

I am in an environment that sends emails from different sources. We're a Google Workspace environment as well. The flow is as such: A user (test@domain.tld) in Gmail sends an email to an email group (...
1
vote
1answer
37 views

Mistake with DKIM 9936A801ED08: no signing table match for using wildcard

I have configured DKIM to be used with wildcards in SigningTable (Centos7) But it gives me an error, and I am not able to see it. Feb 15 08:46:56 monitor01 postfix/submission/smtpd[3374]: connect from ...
2
votes
1answer
284 views

OpenDKIM reports “signing table references unknown key” (CentOS 8)

I'm attempting to configure OpenDKIM with PostFix on CentOS 8. I've set the following in /etc/opendkim.conf: PidFile /run/opendkim/opendkim.pid Mode sv Syslog yes SyslogSuccess yes LogWhy yes ...
3
votes
1answer
267 views

OpenDKIM ignoring hostnames and domains in trusted hosts file

According to http://opendkim.org/opendkim.conf.5.html, the ExternalIgnoredHosts and InternalHosts options support the same format as the PeerList option as follows: The set should contain on each ...
3
votes
1answer
763 views

opendkim-testkey: key not secure

I set up Opendkim milter to work with postfix on my machine. Now email is signed & verified correctly i.e. email source code shows DKIM-Signature header. TXT record on the authorative dns is set ...
1
vote
0answers
42 views

OpenDKIM's UNIX socket and permissions for “others”

Postfix installation procedure created a system user postfix and it's primary group postfix while installation procedure for OpenDKIM created a system user opendkim and it's primary group opendkim. To ...
1
vote
0answers
212 views

Cannot start opendkim service, but command line works fine

Good morning.. I've read about 15 different guides on setup with DKIM and Sendmail signing on ubuntu 18.04 and for some reason I cannot get the service to start, yet command line works fine /etc/...
0
votes
1answer
62 views

Why is SELinux preventing opendkim from accessing private key files, and how do I fix it?

I'm trying to set up opendkim with Postfix (on CentOS). Having copied my known good private key into place, I'm seeing this: Nov 16 12:54:26 [host.domain] setroubleshoot[10093]: SELinux is preventing ...
1
vote
0answers
49 views

OpenDKIM doesn't reject unvalidated incoming emails

Last a few weeks I found that my OpenDKIM stopped rejecting incoming mails with no dkim-signature, bad-signature etc. Signing outgoing is OK, and according to the mail headers verifying provided, as ...
0
votes
1answer
42 views

Should “record not found” errors from opendkim for external domains be showing up in /var/log/mail.err?

I have set up opendkim for the first time. I see many of log entries similar to the following in my /var/log/mail.err file: Oct 13 20:02:51 email opendkim[24304]: 0873142234: key retrieval failed (s=...
2
votes
1answer
86 views

OpenDKIM not signing but no error

I've set up opendkim (2.10) with postfix on an ubuntu 16.04 host. According to the logs, all is fine (i.e., no errors), but mail isn't being signed. I can see that postfix is passing messages to ...
0
votes
1answer
113 views

stop opendkim from signing emails if it already has signature

I am signing all the emails for all domains that goes through my postfix MTA, but I need to custom sign some emails for some domain from my application, is it possible to stop opendkim from signing ...
0
votes
1answer
243 views

intermittent DKIM failure

We have several email servers that send out legitmate email via PostFix and use openDKIM. Recently we've had some recievers claim the DKIM record can not be verified so we've tried various tools such ...
-2
votes
1answer
217 views

My OpenDMARC is rejecting emails from firefox.com . Is their SPF record correct? Or am I wrong?

Why is opendmarc rejecting mail from firefox.com? It looks like their SPF record matches their sending address and does pass: v=spf1 mx a include:amazonses.com include:mail.zendesk.com -all /var/log/...
0
votes
1answer
46 views

Opendkim running but not signing?

I have had a lot of fun with OpenDKIM - it is actively running on my Debian box and here is my code: root@web1:~# tail -f /var/log/syslog | grep -i dkim Sep 7 16:35:38 web1 sm-mta[1504]: ...
0
votes
1answer
54 views

SPF and DKIM for one domain on two servers [closed]

I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain. I now want to setup another server ...
2
votes
1answer
1k views

OpenDKIM won't start: “opendkim: milter socket must be specified”

I'm trying to setup a server using postfix, dovecot, amavis and opendkim for signing. OpenDKIM won't start, here is the output of journalctl -xe, after stopping and starting opendkim: Jul 21 21:54:17 ...
0
votes
1answer
48 views

why opendkim says it isn't running when it is

I installed postfix in a docker container, and installed opendkim there as well. Every time I run a service opendkim status, it gives me opendkim is not running. I tried sysctl status opendkim, and ...
1
vote
0answers
27 views

How do you diagnose the steps of opendkim

So I've been spending a few hours today upgrading the server I work on to sign emails with DKIM using opendkim and postfix. It actually works! The problem though is when I use a tool, such as the ...
0
votes
2answers
851 views

What's the right way to enter DKIM string into BIND zone file? [duplicate]

I use Ubuntu 16.04 LTS. I'm been having this annoying issue again with entering DKIM string (that long code) into my BIND's zone file. In the past (for a different domain) I used to bypass that issue ...
0
votes
1answer
70 views

Can I DKIM sign my email without running a server daemon just for that?

I have an email server that is working perfectly. However, more and more other email servers are getting strict about DKIM signing and DMARC records so I guess I need to finally set that up ... I am ...
0
votes
1answer
716 views

How to implement DKIM for Domino mail server?

I'd like to write a Domino servlet that will stamp outgoing mail with a DKIM domain keys signature. We would generate the Domino mail server DKIM signature and put it in a TXT file with the DNS ...
0
votes
0answers
29 views

openssl .so library version incompatible

I upgraded to openssl-1.1.1d from openssl-1.0.0 But, opendkim supports openssl-1.0. So, some changes were done and compiled it. The compiling was okay. When I try to run the binary, sometimes it runs....
2
votes
1answer
195 views

DKIM set on AWS EC2 but mail header says none in Outlook

I'm configuring an AWS EC2 instance with Postfix, and have set it up with Route53 including reverse DNS. I've tested that I can send emails, and Outlook receives them fine, but Gmail does not. I ...
0
votes
1answer
106 views

Can I use a different public key for DKIM signatures for the same domain?

Can I have separate public keys for the following : support@mydomain.com myaddr@mydomain.com I am using a keytable so my initial feel is to create the keys using a different selector and since I am ...
0
votes
1answer
651 views

SOLVED: Amavis and dkim signature on incoming mails: header.s ignored

I am a little bit confused with how amavis process incoming mails. The Postfix service on my Zimbra server is configured to sign outgoing mails. And it works like a charm. Problem is mails sent to ...
0
votes
1answer
571 views

DKIM/Postfix/Debian trouble: Postfix cannot connect to opendkim socket

Setup: Debian 10, postfix 3.4.7 and opendkim 2.11 (both installed from Debian's repositories). I followed Debian's instructions at https://wiki.debian.org/opendkim What looks like the culprit is the ...
1
vote
2answers
1k views

OpenDKIM query timed out (even with opendkim-testkey and Nameservers set)

I try to set up a mail server on Debian with opendkim and opendmarc When I receive an email, SpamAssassin refuse it because opendkim can't do the DNS query I tested with opendkim-testkey command, ...
0
votes
1answer
57 views

OpenDKIM fails to start

I'm trying to install OpenDKIM on Ubuntu 18.04.3 LTS It simply does not start. First I was starting it through the systemd service, but running it from the command line produces the same result. I ...
0
votes
0answers
325 views

Postfix send subdomain emails rewritten to main domain

I have Postfix + Dovecot + Mysql config, where I support multiple domains. The problem is when I add subdomain that already has main domain in virtual_mailbox_domains, Postfix rewrites it to main ...
-1
votes
1answer
117 views

Procmail recipe - If no dkim signature then forward to .spam

Having read through the documentation at http://pm-doc.sourceforge.net/doc/ i cannot find an answer. I want to use procmail to place mail without dkim into user's spam folder. I have found many ...
1
vote
0answers
357 views

OpenDKIM: Use MySQL socket in KeyTable/SigningTable

How can i connect to a MySQL socket (not TCP) with e.g. KeyTable/SigningTable in OpenDKIM? The dataset which needs to be used is "dsn:" and the manual says: If the string begins with "dsn:" and ...
2
votes
1answer
721 views

OpenDKIM generates 2 keys

I've followed instructions to set up spf and DKIM on my mailing server. SPF is working fine so far, however I am having problem with DKIM. In every single instruction website, they show the output ...
0
votes
0answers
657 views

No signing table match for <user@gmail.com> in OpenDKIM configuratio

I have a problem with my opendkim configuration. I have the alias ciao@mrtsolutions.it that forward all to mymail@gmail.com. When I send email to alias ciao@mrtsolutions.it from me@mrtsolutions.it, I ...
3
votes
2answers
1k views

OpenDKIM / Postfix sign console-sent mail, but not from a mail client / SMTP

I have Postfix running on a Debian 9 machine, and installed opendkim (both from the Debian repositories). The milter socket/connection is inet:localhost:8892, and the iptables firewall allows that ...
0
votes
1answer
54 views

OpenDKIM - Correct setting for “MTA” option

I have a server which is used purely for outbound email. I would like opendkim to sign every email going through, assuming it has a signing table entry. However, I can't seem to find any documentation ...
0
votes
1answer
2k views

RSPAMD + DKIM Signing: How to be able to use a single DKIM Key for multiple domains?

I was able to setup a Single DKIM Key for multiple domains with OPENDKIM by using their KeyTables and SigningTable. But since the company started to use RSPAMD, I could not use OPENDKIM along with ...
2
votes
0answers
386 views

DKIM - many subdomains without multiple txt records

I've been having trouble with opendkim, figuring out how to best create records for multiple subdomains. I've tried using wildcards to cover all of the subdomains and wasn't able to get it working. I ...
1
vote
1answer
840 views

DKIM signature failure only on CRON jobs

I originally posted this on askubuntu but there's been no response there. I have successfully installed Postfix and OpenDkim on my server, and it's correctly signing mail from several different ...
0
votes
1answer
39 views

OpenDKIM signing conditions

Is it possible to use conditions for signing outgoing messages with OpenDKIM? It should only sign outgoing messages if the selector exists in DNS.
2
votes
1answer
629 views

OpenDMARC with multiple MX: correct setup for trust between servers

There are many tutorials on how to setup OpenDMARC on your favorite flavor of Linux, but they all focus on single server configurations. My goal was to keep backup secondary MX servers, but enforce ...
0
votes
1answer
2k views

Dkim record fails - A public-key (p=) is required

I setup dkim record using following tutorial. But when I check the mx records using googleapps toolbox and dkimcore cheking tool it gives error google says dkim is not setup, dkimcore says A public-...
1
vote
1answer
581 views

difference between local and inet socket?

I noticed that, while setting up opendkim, the options for the Socket are: #SOCKET="local:/var/run/opendkim/opendkim.sock" # default #SOCKET="inet:54321" # listen on all interfaces on port 54321 #...
1
vote
1answer
187 views

OpenDKIM: Add public key to domain, Debian 9, GoDaddy

I was trying to add my DKIM public key to my domain, but i don't know how i have to modify it This is my entire public key file mail._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; " "p=...
0
votes
2answers
1k views

Tons of OpenDKIM Issues

I for the life of me cannot get OpenDKIM to work correctly. I can send and receive messages just fine with postfix and roundcube. I have tried tons of things to get this working. At this point, I am ...
1
vote
0answers
394 views

Postfix: proper configurations - main.cf, DNS, DKIM

Inherited an Ubuntu server (12.04) running Postfix (2.9.6) that works as an outbound-only mail relay for a web application. Have got SPF and DMARC records entered in public DNS (Route53). Working to ...
1
vote
0answers
421 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
0
votes
1answer
597 views

DKIM public key & DKIM from DNS are the same but don't match because of spacing

Please take a look at this picture of mail-tester.com saying that Your DKIM signature is not valid. As you can see, the DKIM signature and public key are identical in term of text (characters) but ...
1
vote
1answer
190 views

How mailchimp can sign email changing the domain and from header?

I've configured a SMPT server using postfix, dovecot, opendkim, openspf, openssl etc... I'm trying to figured out how mailchimp can send mails signed by their servers and deliver to recipients without ...
0
votes
1answer
278 views

OpenDKIM starts before MariaDB on Ubuntu 18.04

I installed OpenDKIM on Ubuntu Server 18.04, using it with Modoboa, so the config file contains DSN for KeyTable and SigningTable to connect to MariaDB. I noticed that the service always fails to ...