Questions tagged [opendkim]
Open source implementation of the DKIM (Domain Keys Identified Mail). The capabilities include signing and verifying DKIM signature of the email.
163
questions
0
votes
1
answer
26
views
OpenDKIM & OpenDMARC on SLES 15 SP2
Hello is it possible to install OpenDKIM & OpenDMARC on SLES 15 SP2 through the default repository of OpenSUSE?
0
votes
1
answer
34
views
OpenDkim - PHPMailer - Failure OpenDkim
my dkim configuration was working just fine. Im working with an email marketing app, pretty simple, normally i used to send the campaign with a Sender ID that is my domain company, and for the From ...
0
votes
2
answers
282
views
opendkim milter not launching on proper server socket
The following error impeded the restart of opendkim
× opendkim.service - OpenDKIM Milter
Loaded: loaded (/lib/systemd/system/opendkim.service; enabled; vendor preset: enabled)
Active: failed ...
- 207
-1
votes
1
answer
106
views
mail relay routing FROM domain with dkim
Current setup
First of all i must say that im so so (read like "nothing know") in things like postfix or open dkim.
We have many domains on our exchange (realy a lot). and thats work like &...
- 1
0
votes
1
answer
222
views
opendkim-testkey: key not secure (file permissions are good and TrustAnchorFile config setting is set)
If I run sudo opendkim-testkey -d mydomain.com -s selector -vvv, I get
opendkim-testkey: using default configfile /etc/opendkim.conf
opendkim-testkey: checking key 'selector._domainkey.mydomain.com'
...
1
vote
0
answers
60
views
OpenDKIM on Fedora Server, opendkim-testkey loads the key, says it's checking it, then just says "query failed" How do I find (and fix) what's wrong?
On Fedora Server 37 (updated as of about February 1, 2023), a new OpenDKIM installation was performed (it's version v2.11.0). The configuration included creating a signing table and a key table, and ...
- 1,226
0
votes
0
answers
82
views
Configurating DKIM and SPF, key not secured
On a Ubuntu 20.04 VPS, installing opendkim via
sudo apt install opendkim opendkim-tools proceeds as expected, following the steps provided here.
However, upon testing, while e-mails get sent in ...
- 207
0
votes
0
answers
47
views
What is the correct way to sign mail on a relay MTA
I have a setup where outbound mail from an internal mail server (lets call it System A) is relayed to a smart host (we will call this System B) which then sends it out to the Internet and eventually ...
- 71
2
votes
0
answers
212
views
OpenDKIM on MTA not signing mails from remote mail servers
I have a configuration where we have one MTA responsible for sending emails from a number of internal servers.
The internal servers all run Postfix on a number of different domains. They are all ...
- 277
0
votes
0
answers
646
views
How to correctly configure OpenDKIM with Postfix on Debian 11?
The desired settings are to create a multi domain mail server.
This is my main domain example.com and this is my subdomain: mail.example.com
Taking the rDNS as the following verifications:
hostname -f
...
- 101
0
votes
1
answer
63
views
Postfix Sendonly Multiple Domains - smtp Auth for each domain?
My title pretty much sums it up
I have recently setup a sendonly postfix server
i used this guide
https://www.linuxbabe.com/mail-server/postfix-send-only-multiple-domains-ubuntu#generate-dkim-keypair
...
- 1
0
votes
1
answer
65
views
Postfix OpenDKIM unable to sign outbound email
I configured OpenDKIM following the guidelines here:
https://www.linuxbabe.com/mail-server/setting-up-dkim-and-spf
Rather than generate keys I used those already configured on our domain, that were ...
- 277
1
vote
3
answers
386
views
How destination mail server can know the DKIM selector
It is possible to set a "subdomain" in DKIM DNS record name.
This "subdomain" is called a selector. It allows to have multiple DKIM keys for the same domain.
There is something I ...
- 319
0
votes
0
answers
47
views
SendMail Bounce Back Missing Send To Address in Transcript
SendMail bounce back response is showing a blank To address. How can I correct this so the bounce back includes the To address?
This began occurring after installing opendkim on the server and before ...
- 179
1
vote
0
answers
65
views
Postfix: getting 50 or more copies of the same email from specific senders
I have a Postfix (2.10.1) / Dovecot server running on Centos 7. From specific servers I get about 50 copies of the same email every weekend, I tried a wireshark but it uses STARTTLS so its all ...
- 11
2
votes
1
answer
200
views
Postfix / OpenDKIM config on Centos8
I've setup Postfix with Dovecot as an integrated mail service for my SaaS app, it worked great as an inbox. The issue started when I started to send emails, it was not signed so I went ahead and ...
0
votes
0
answers
1k
views
DKIM_INVALID in Spamassassin only for emails sent from other emails in the same server
I have postfix/dovecot running with spamassassin on Centos.
PROBLEM:
The VPS acts as a mail server
Spamassassin edits the email subject and adds [SPAM}
Ms. Outlook on Windows moves those emails to ...
- 339
1
vote
0
answers
358
views
Why are my mails failling body hash verification?
Since a few weeks, mails sent via my mailserver at the-grue.de fail dkim authentification. That's very strange, because I'm not at all aware of any changes on my part...
mxtoolbox checked the mail, ...
-1
votes
1
answer
742
views
Setup bind9 dns for setup DKIM and SPF records [closed]
Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
1
vote
3
answers
7k
views
Can't open PID file /run/opendkim/opendkim.pid (yet?) after start: Operation not permitted
i am about 2 hours on configure dkim with postfix on ubuntu 20.04. I try absolutly everything, but dkim wont work.
OpenDKIM-Service won´t start:
root@mail:~# service opendkim status
● opendkim.service ...
- 21
5
votes
1
answer
860
views
Why doesn't dkim sign the letter?
I have configured DKIM:
Dec 27 11:10:03 mailer opendkim[378]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf)
Dec 27 11:10:10 mailer postfix/postfix-script[551]: warning: symlink leaves ...
- 161
0
votes
1
answer
393
views
OpenDKIM & Mailman
I have a small mail server based on Fedora with postfix, OpenDKIM, spamassassin and mailman.
OpenDKIM signature for outgoing emails works
OpenDKIM verification for incoming emails works
When a DKIM ...
- 467
2
votes
1
answer
457
views
Exim Unable to Read DKIM Key
Exim is spitting out (what looks like) a privilege error:
# tail -n1 /var/log/exim/paniclog
2021-11-15 16:38:35.955 [682275] 1mme43-002rUN-QV unable to open file for reading: /etc/opendkim/keys/...
- 121
1
vote
1
answer
599
views
Configuring postfix and opendkim socket value
I have the following line in my /etc/postfix/main.cf
smtpd_milters=inet:127.0.0.1:8891 inet:127.0.0.1:8893
So then What should I put for Socket in /etc/default/opendkim or /etc/opendkim.conf ?
- 23
5
votes
1
answer
7k
views
1024 or 2048 bit keys for DKIM?
Referencing this: https://crypto.stackexchange.com/questions/72297/recommended-key-size-for-dkim
What I get from this is (at the time) DNS providers (usually) allow for up to 1024 bit keys but not ...
- 201
4
votes
1
answer
1k
views
How to validate opendkim generated RSA keys
I'm trying to diagnose OpenDKIM validation errors (see this question). Way down in the belly of the beast, I'm at the point where I'm trying to make sure the keys generated are actually correct.
I'm ...
- 409
2
votes
0
answers
543
views
How to diagnose opendkim RSA signatures
I'm having an issue where my DKIM signatures are failing everywhere. There was a question on this here, but the original poster answered his own question, and the answer seems unrelated. After some ...
- 409
1
vote
2
answers
953
views
OpenDKIM-provided tools do not provide a usable key-pair for DKIM
I use opendkim-genkey -b 2048 -t -s default -d mydomain.com, resulting in files default.private and default.txt. Yes, default.private begins (correctly, SFAIK) with -----BEGIN RSA PRIVATE KEY----- and ...
- 11
0
votes
1
answer
120
views
opendkim: Restore /etc/default/opendkim to original values
I accidentally overwrote my /etc/default/opendkim while changing the configuration. How can I restore it to the "factory defaults"?
I already tried uninstalling and re-installing the package....
- 133
2
votes
1
answer
2k
views
Is DKIM/ARC working properly on my Mailman server?
I've set up a Mailman 3 server with Postfix. I've configured Postfix to add DKIM headers using OpenDKIM and a test email from that server to a Microsoft-hosted email address suggests that DKIM is OK:
...
- 121
3
votes
1
answer
2k
views
Sendmail authenticating with DKIM but Roundcube is not authenticating
So I have set up the mail server, Roundcube, and Sendmail both work as expected.
but many of my emails were going to spam in Gmail and others, so I was setting up the DKIM auth and it was successful.
[...
- 41
1
vote
0
answers
187
views
Postfix from rewriting (smtp_generic_maps) + DKIM
We have SMTP server for the application emails what should do following:
change “From” for all emails
sign emails with DKIM
I have set up postfix rewriting with smtp_generic.
The default flow is ...
- 11
1
vote
1
answer
593
views
DKIM signing for subdomain issue
I am in an environment that sends emails from different sources. We're a Google Workspace environment as well.
The flow is as such:
A user ([email protected]) in Gmail sends an email to an email group (...
- 11
1
vote
1
answer
502
views
Mistake with DKIM 9936A801ED08: no signing table match for using wildcard
I have configured DKIM to be used with wildcards in SigningTable (Centos7)
But it gives me an error, and I am not able to see it.
Feb 15 08:46:56 monitor01 postfix/submission/smtpd[3374]: connect from ...
- 416
2
votes
1
answer
3k
views
OpenDKIM reports "signing table references unknown key" (CentOS 8)
I'm attempting to configure OpenDKIM with PostFix on CentOS 8.
I've set the following in /etc/opendkim.conf:
PidFile /run/opendkim/opendkim.pid
Mode sv
Syslog yes
SyslogSuccess yes
LogWhy yes
...
- 155
4
votes
1
answer
4k
views
OpenDKIM ignoring hostnames and domains in trusted hosts file
According to http://opendkim.org/opendkim.conf.5.html, the ExternalIgnoredHosts and InternalHosts options support the same format as the PeerList option as follows:
The set should contain on each ...
- 91
8
votes
1
answer
9k
views
opendkim-testkey: key not secure
I set up Opendkim milter to work with postfix on my machine. Now email is signed & verified correctly i.e. email source code shows DKIM-Signature header.
TXT record on the authorative dns is set ...
- 363
1
vote
0
answers
437
views
OpenDKIM's UNIX socket and permissions for "others"
Postfix installation procedure created a system user postfix and it's primary group postfix while installation procedure for OpenDKIM created a system user opendkim and it's primary group opendkim.
To ...
- 363
3
votes
0
answers
2k
views
Cannot start opendkim service, but command line works fine
Good morning.. I've read about 15 different guides on setup with DKIM and Sendmail signing on ubuntu 18.04 and for some reason I cannot get the service to start, yet command line works fine
/etc/...
- 31
0
votes
1
answer
297
views
Why is SELinux preventing opendkim from accessing private key files, and how do I fix it?
I'm trying to set up opendkim with Postfix (on CentOS).
Having copied my known good private key into place, I'm seeing this:
Nov 16 12:54:26 [host.domain] setroubleshoot[10093]: SELinux is preventing ...
- 173
1
vote
0
answers
551
views
OpenDKIM doesn't reject unvalidated incoming emails
Last a few weeks I found that my OpenDKIM stopped rejecting incoming mails with no dkim-signature, bad-signature etc. Signing outgoing is OK, and according to the mail headers verifying provided, as ...
- 11
0
votes
1
answer
389
views
Should "record not found" errors from opendkim for external domains be showing up in /var/log/mail.err?
I have set up opendkim for the first time. I see many of log entries similar to the following in my /var/log/mail.err file:
Oct 13 20:02:51 email opendkim[24304]: 0873142234: key retrieval failed (s=...
- 534
2
votes
1
answer
944
views
OpenDKIM not signing but no error
I've set up opendkim (2.10) with postfix on an ubuntu 16.04 host. According to the logs, all is fine (i.e., no errors), but mail isn't being signed. I can see that postfix is passing messages to ...
- 435
0
votes
2
answers
634
views
stop opendkim from signing emails if it already has signature
I am signing all the emails for all domains that goes through my postfix MTA, but I need to custom sign some emails for some domain from my application, is it possible to stop opendkim from signing ...
1
vote
1
answer
907
views
intermittent DKIM failure
We have several email servers that send out legitmate email via PostFix and use openDKIM.
Recently we've had some recievers claim the DKIM record can not be verified so we've tried various tools such ...
- 113
-2
votes
1
answer
674
views
My OpenDMARC is rejecting emails from firefox.com . Is their SPF record correct? Or am I wrong?
Why is opendmarc rejecting mail from firefox.com? It looks like their SPF record matches their sending address and does pass:
v=spf1 mx a include:amazonses.com include:mail.zendesk.com -all
/var/log/...
- 145
0
votes
1
answer
366
views
Opendkim running but not signing?
I have had a lot of fun with OpenDKIM - it is actively running on my Debian box and here is my code:
root@web1:~# tail -f /var/log/syslog | grep -i dkim
Sep 7 16:35:38 web1 sm-mta[1504]: ...
- 139
0
votes
1
answer
573
views
SPF and DKIM for one domain on two servers [closed]
I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain.
I now want to setup another server ...
- 171
3
votes
1
answer
5k
views
OpenDKIM won't start: "opendkim: milter socket must be specified"
I'm trying to setup a server using postfix, dovecot, amavis and opendkim for signing.
OpenDKIM won't start, here is the output of journalctl -xe, after stopping and starting opendkim:
Jul 21 21:54:17 ...
- 33
1
vote
1
answer
309
views
why opendkim says it isn't running when it is
I installed postfix in a docker container, and installed opendkim there as well.
Every time I run a service opendkim status, it gives me opendkim is not running. I tried sysctl status opendkim, and ...
- 200