1 (edited by mqanadelo 2019-10-28 18:13:23)

Topic: Use one DKIM key for all mail domains not work

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.7 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version: Ubuntu 16.04.3 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

hi all

i setup Dkim and its work :

amavisd-new testkeys
TESTING#1 red.mtit.ps: dkim._domainkey.red.mtit.ps => pass

but when i try to use Use one DKIM key for all mail domains its not work,
as example

i add mtit.pna.ps in :
/etc/amavis/conf.d/50-user

@dkim_signature_options_bysender_maps

like below :

"mtit.pna.ps"  => { d => "mtit.pna.ps", a => 'rsa-sha256', ttl => 10*24*3600 },

and check with mail-tester its give me :

Your message is not signed with DKIM

but in mxtoolbox its ok,
see attachment please.

so whats the solution?

regards.

Post's attachments

dkim.jpg 336.37 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Use one DKIM key for all mail domains not work

Please check our tutorial here:
https://docs.iredmail.org/sign.dkim.sig … il-domains

3

Re: Use one DKIM key for all mail domains not work

i already try it
its worked for one domain not to all mail domains

regards.

4

Re: Use one DKIM key for all mail domains not work

any body help please ?

5

Re: Use one DKIM key for all mail domains not work

DKIM in iRedmail/Amavis stopped working for us some months ago. There seems to be a problem with newer Postfix and/or amavisd versions (> Postfix 3.4, > Amavisd 2.11).

I could never get it debugged, so we switched to OpenDKIM a long time ago and integrated it into iRedmail.

6

Re: Use one DKIM key for all mail domains not work

With this setting, Amavisd will sign the DKIM key for all outbound emails. Just that simple smile

dkim_key('mydomain.com', "dkim", "/var/lib/dkim/mydomain.com.pem");

@dkim_signature_options_bysender_maps = ({
    # catch-all (one dkim key for all domains)
    '.' => {d => 'mydomain.com',
            a => 'rsa-sha256',
            c => 'relaxed/simple',
            ttl => 30*24*3600 },
});