Questions tagged [opendkim]

Open source implementation of the DKIM (Domain Keys Identified Mail). The capabilities include signing and verifying DKIM signature of the email.

Filter by
Sorted by
Tagged with
2 votes
1 answer
56 views

Postfix / OpenDKIM config on Centos8

I've setup Postfix with Dovecot as an integrated mail service for my SaaS app, it worked great as an inbox. The issue started when I started to send emails, it was not signed so I went ahead and ...
user avatar
0 votes
0 answers
112 views

DKIM_INVALID in Spamassassin only for emails sent from other emails in the same server

I have postfix/dovecot running with spamassassin on Centos. PROBLEM: The VPS acts as a mail server Spamassassin edits the email subject and adds [SPAM} Ms. Outlook on Windows moves those emails to ...
user avatar
  • 329
1 vote
0 answers
50 views

Why are my mails failling body hash verification?

Since a few weeks, mails sent via my mailserver at the-grue.de fail dkim authentification. That's very strange, because I'm not at all aware of any changes on my part... mxtoolbox checked the mail, ...
user avatar
-1 votes
1 answer
92 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
user avatar
  • 1
0 votes
0 answers
62 views

Why a postfix relay server doesn't sign relayed massges with DKIM?

I have postfix mail server on ubuntu 18, which act as a relay email server for a couple virtual machines and as an imap/smtp server for our colleges. If I send an email from a mail client with smtp ...
user avatar
0 votes
0 answers
84 views

Setting up OpenDKIM correctly with a domain / subdomain send only server

I'm setting up an EC2/AWS instance to send email, currently on mail-tester it is reporting that my email is not signed with DKIM. I think I may have set up DKIM incorrectly. I used the following ...
user avatar
  • 45
0 votes
2 answers
758 views

Can't open PID file /run/opendkim/opendkim.pid (yet?) after start: Operation not permitted

i am about 2 hours on configure dkim with postfix on ubuntu 20.04. I try absolutly everything, but dkim wont work. OpenDKIM-Service won´t start: root@mail:~# service opendkim status ● opendkim.service ...
user avatar
5 votes
1 answer
597 views

Why doesn't dkim sign the letter?

I have configured DKIM: Dec 27 11:10:03 mailer opendkim[378]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf) Dec 27 11:10:10 mailer postfix/postfix-script[551]: warning: symlink leaves ...
user avatar
  • 161
0 votes
1 answer
110 views

OpenDKIM & Mailman

I have a small mail server based on Fedora with postfix, OpenDKIM, spamassassin and mailman. OpenDKIM signature for outgoing emails works OpenDKIM verification for incoming emails works When a DKIM ...
user avatar
  • 457
1 vote
0 answers
114 views

Exim Unable to Read DKIM Key

Exim is spitting out (what looks like) a privilege error: # tail -n1 /var/log/exim/paniclog 2021-11-15 16:38:35.955 [682275] 1mme43-002rUN-QV unable to open file for reading: /etc/opendkim/keys/...
user avatar
0 votes
1 answer
127 views

Configuring postfix and opendkim socket value

I have the following line in my /etc/postfix/main.cf smtpd_milters=inet:127.0.0.1:8891 inet:127.0.0.1:8893 So then What should I put for Socket in /etc/default/opendkim or /etc/opendkim.conf ?
user avatar
4 votes
1 answer
1k views

1024 or 2048 bit keys for DKIM?

Referencing this: https://crypto.stackexchange.com/questions/72297/recommended-key-size-for-dkim What I get from this is (at the time) DNS providers (usually) allow for up to 1024 bit keys but not ...
user avatar
4 votes
1 answer
331 views

How to validate opendkim generated RSA keys

I'm trying to diagnose OpenDKIM validation errors (see this question). Way down in the belly of the beast, I'm at the point where I'm trying to make sure the keys generated are actually correct. I'm ...
user avatar
2 votes
0 answers
160 views

How to diagnose opendkim RSA signatures

I'm having an issue where my DKIM signatures are failing everywhere. There was a question on this here, but the original poster answered his own question, and the answer seems unrelated. After some ...
user avatar
1 vote
2 answers
430 views

OpenDKIM-provided tools do not provide a usable key-pair for DKIM

I use opendkim-genkey -b 2048 -t -s default -d mydomain.com, resulting in files default.private and default.txt. Yes, default.private begins (correctly, SFAIK) with -----BEGIN RSA PRIVATE KEY----- and ...
user avatar
0 votes
1 answer
36 views

opendkim: Restore /etc/default/opendkim to original values

I accidentally overwrote my /etc/default/opendkim while changing the configuration. How can I restore it to the "factory defaults"? I already tried uninstalling and re-installing the package....
user avatar
2 votes
1 answer
678 views

Is DKIM/ARC working properly on my Mailman server?

I've set up a Mailman 3 server with Postfix. I've configured Postfix to add DKIM headers using OpenDKIM and a test email from that server to a Microsoft-hosted email address suggests that DKIM is OK: ...
user avatar
0 votes
0 answers
120 views

OpenDkim install on Docker fail

I have a docker container, and I have installed postfix successfully, but I can not install OpenDKIM successfully. I tried the command service OpenDKIM status, get this error opendkim is not running I ...
user avatar
3 votes
1 answer
771 views

Sendmail authenticating with DKIM but Roundcube is not authenticating

So I have set up the mail server, Roundcube, and Sendmail both work as expected. but many of my emails were going to spam in Gmail and others, so I was setting up the DKIM auth and it was successful. [...
user avatar
1 vote
0 answers
61 views

Postfix from rewriting (smtp_generic_maps) + DKIM

We have SMTP server for the application emails what should do following: change “From” for all emails sign emails with DKIM I have set up postfix rewriting with smtp_generic. The default flow is ...
user avatar
1 vote
1 answer
292 views

DKIM signing for subdomain issue

I am in an environment that sends emails from different sources. We're a Google Workspace environment as well. The flow is as such: A user (test@domain.tld) in Gmail sends an email to an email group (...
user avatar
  • 11
1 vote
1 answer
196 views

Mistake with DKIM 9936A801ED08: no signing table match for using wildcard

I have configured DKIM to be used with wildcards in SigningTable (Centos7) But it gives me an error, and I am not able to see it. Feb 15 08:46:56 monitor01 postfix/submission/smtpd[3374]: connect from ...
user avatar
  • 397
2 votes
1 answer
1k views

OpenDKIM reports "signing table references unknown key" (CentOS 8)

I'm attempting to configure OpenDKIM with PostFix on CentOS 8. I've set the following in /etc/opendkim.conf: PidFile /run/opendkim/opendkim.pid Mode sv Syslog yes SyslogSuccess yes LogWhy yes ...
user avatar
4 votes
1 answer
2k views

OpenDKIM ignoring hostnames and domains in trusted hosts file

According to http://opendkim.org/opendkim.conf.5.html, the ExternalIgnoredHosts and InternalHosts options support the same format as the PeerList option as follows: The set should contain on each ...
user avatar
  • 71
5 votes
1 answer
4k views

opendkim-testkey: key not secure

I set up Opendkim milter to work with postfix on my machine. Now email is signed & verified correctly i.e. email source code shows DKIM-Signature header. TXT record on the authorative dns is set ...
user avatar
  • 317
1 vote
0 answers
179 views

OpenDKIM's UNIX socket and permissions for "others"

Postfix installation procedure created a system user postfix and it's primary group postfix while installation procedure for OpenDKIM created a system user opendkim and it's primary group opendkim. To ...
user avatar
  • 317
2 votes
0 answers
943 views

Cannot start opendkim service, but command line works fine

Good morning.. I've read about 15 different guides on setup with DKIM and Sendmail signing on ubuntu 18.04 and for some reason I cannot get the service to start, yet command line works fine /etc/...
user avatar
  • 21
0 votes
1 answer
131 views

Why is SELinux preventing opendkim from accessing private key files, and how do I fix it?

I'm trying to set up opendkim with Postfix (on CentOS). Having copied my known good private key into place, I'm seeing this: Nov 16 12:54:26 [host.domain] setroubleshoot[10093]: SELinux is preventing ...
user avatar
1 vote
0 answers
196 views

OpenDKIM doesn't reject unvalidated incoming emails

Last a few weeks I found that my OpenDKIM stopped rejecting incoming mails with no dkim-signature, bad-signature etc. Signing outgoing is OK, and according to the mail headers verifying provided, as ...
user avatar
  • 11
0 votes
1 answer
158 views

Should "record not found" errors from opendkim for external domains be showing up in /var/log/mail.err?

I have set up opendkim for the first time. I see many of log entries similar to the following in my /var/log/mail.err file: Oct 13 20:02:51 email opendkim[24304]: 0873142234: key retrieval failed (s=...
user avatar
  • 412
2 votes
1 answer
421 views

OpenDKIM not signing but no error

I've set up opendkim (2.10) with postfix on an ubuntu 16.04 host. According to the logs, all is fine (i.e., no errors), but mail isn't being signed. I can see that postfix is passing messages to ...
user avatar
  • 405
0 votes
1 answer
280 views

stop opendkim from signing emails if it already has signature

I am signing all the emails for all domains that goes through my postfix MTA, but I need to custom sign some emails for some domain from my application, is it possible to stop opendkim from signing ...
user avatar
0 votes
1 answer
442 views

intermittent DKIM failure

We have several email servers that send out legitmate email via PostFix and use openDKIM. Recently we've had some recievers claim the DKIM record can not be verified so we've tried various tools such ...
user avatar
  • 103
-2 votes
1 answer
429 views

My OpenDMARC is rejecting emails from firefox.com . Is their SPF record correct? Or am I wrong?

Why is opendmarc rejecting mail from firefox.com? It looks like their SPF record matches their sending address and does pass: v=spf1 mx a include:amazonses.com include:mail.zendesk.com -all /var/log/...
user avatar
  • 145
0 votes
1 answer
175 views

Opendkim running but not signing?

I have had a lot of fun with OpenDKIM - it is actively running on my Debian box and here is my code: root@web1:~# tail -f /var/log/syslog | grep -i dkim Sep 7 16:35:38 web1 sm-mta[1504]: ...
user avatar
  • 139
0 votes
1 answer
199 views

SPF and DKIM for one domain on two servers [closed]

I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain. I now want to setup another server ...
user avatar
3 votes
1 answer
3k views

OpenDKIM won't start: "opendkim: milter socket must be specified"

I'm trying to setup a server using postfix, dovecot, amavis and opendkim for signing. OpenDKIM won't start, here is the output of journalctl -xe, after stopping and starting opendkim: Jul 21 21:54:17 ...
user avatar
1 vote
1 answer
140 views

why opendkim says it isn't running when it is

I installed postfix in a docker container, and installed opendkim there as well. Every time I run a service opendkim status, it gives me opendkim is not running. I tried sysctl status opendkim, and ...
user avatar
1 vote
0 answers
43 views

How do you diagnose the steps of opendkim

So I've been spending a few hours today upgrading the server I work on to sign emails with DKIM using opendkim and postfix. It actually works! The problem though is when I use a tool, such as the ...
user avatar
  • 11
0 votes
2 answers
4k views

What's the right way to enter DKIM string into BIND zone file? [duplicate]

I use Ubuntu 16.04 LTS. I'm been having this annoying issue again with entering DKIM string (that long code) into my BIND's zone file. In the past (for a different domain) I used to bypass that issue ...
user avatar
0 votes
1 answer
106 views

Can I DKIM sign my email without running a server daemon just for that?

I have an email server that is working perfectly. However, more and more other email servers are getting strict about DKIM signing and DMARC records so I guess I need to finally set that up ... I am ...
user avatar
0 votes
1 answer
1k views

How to implement DKIM for Domino mail server?

I'd like to write a Domino servlet that will stamp outgoing mail with a DKIM domain keys signature. We would generate the Domino mail server DKIM signature and put it in a TXT file with the DNS ...
user avatar
  • 113
0 votes
0 answers
72 views

openssl .so library version incompatible

I upgraded to openssl-1.1.1d from openssl-1.0.0 But, opendkim supports openssl-1.0. So, some changes were done and compiled it. The compiling was okay. When I try to run the binary, sometimes it runs....
user avatar
  • 101
2 votes
1 answer
333 views

DKIM set on AWS EC2 but mail header says none in Outlook

I'm configuring an AWS EC2 instance with Postfix, and have set it up with Route53 including reverse DNS. I've tested that I can send emails, and Outlook receives them fine, but Gmail does not. I ...
user avatar
0 votes
1 answer
163 views

Can I use a different public key for DKIM signatures for the same domain?

Can I have separate public keys for the following : support@mydomain.com myaddr@mydomain.com I am using a keytable so my initial feel is to create the keys using a different selector and since I am ...
user avatar
  • 1
0 votes
1 answer
1k views

SOLVED: Amavis and dkim signature on incoming mails: header.s ignored

I am a little bit confused with how amavis process incoming mails. The Postfix service on my Zimbra server is configured to sign outgoing mails. And it works like a charm. Problem is mails sent to ...
user avatar
  • 121
0 votes
1 answer
982 views

DKIM/Postfix/Debian trouble: Postfix cannot connect to opendkim socket

Setup: Debian 10, postfix 3.4.7 and opendkim 2.11 (both installed from Debian's repositories). I followed Debian's instructions at https://wiki.debian.org/opendkim What looks like the culprit is the ...
user avatar
  • 175
2 votes
2 answers
2k views

OpenDKIM query timed out (even with opendkim-testkey and Nameservers set)

I try to set up a mail server on Debian with opendkim and opendmarc When I receive an email, SpamAssassin refuse it because opendkim can't do the DNS query I tested with opendkim-testkey command, ...
user avatar
  • 31
0 votes
1 answer
74 views

OpenDKIM fails to start

I'm trying to install OpenDKIM on Ubuntu 18.04.3 LTS It simply does not start. First I was starting it through the systemd service, but running it from the command line produces the same result. I ...
user avatar
  • 348
0 votes
0 answers
483 views

Postfix send subdomain emails rewritten to main domain

I have Postfix + Dovecot + Mysql config, where I support multiple domains. The problem is when I add subdomain that already has main domain in virtual_mailbox_domains, Postfix rewrites it to main ...
user avatar
  • 101