1 Topic by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Topic: Questions about DKIM and SPF

First off "Thank you" to the developer/s this stuff had me pulling my hair out before I found this.

I am running iReadMail 0.5.0 on a brand new CentOS 5.3 vps hosted at 1and1. No other software installed except iReadMail.

I have gone through the tutorials and I now have my base system installed. I can log in to everything and create accounts. I can even send mail. The problem is that no one ever gets it, not even between accounts on the same server. All emails from external addresses are being bounced back.

I haven't set up the SPF or DKIM but I do have the information I need for it.

My question is how do I set this up? Is this even something I can do? I spoke with my isp and they told me that I would have to do all this.

I am fine with that I just don't know where to go from here.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Questions about DKIM and SPF

cluke009 wrote:

The problem is that no one ever gets it, not even between accounts on the same server. All emails from external addresses are being bounced back.

Post the bounce mails so that others can help you to solve issues.

Do you have correct DNS records? Includes A & MX type, otherwise you won't receive mails from external mail servers.

3 Reply by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

Heres a copy of the bounced email. Edited of course.

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  www@MyDomain.com
    SMTP error from remote mail server after RCPT TO:<www@MyDomain.com>:
    host mx01.1and1.com [MyIPAddress]: 550 <www@example.com>:
    invalid address

I think my DNS records are correct. I know what they should be. Where do I confirm this?

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Questions about DKIM and SPF

www@MyDomain.com
    SMTP error from remote mail server after RCPT TO:<www@MyDomain.com>:
    host mx01.1and1.com [MyIPAddress]: 550 <www@example.com>:
    invalid address

The mail address is 'INVALID'. Typo error while you composing mail?

5 Reply by cluke009 (edited by cluke009 2009-08-24 14:32:49)

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

I double checked the address and I can log in with it. Just to test it I created a new account.
Trying to send a mail to this account I don't receive a bounced message.

I did finally receive an undeliverable message while sending from the account as well as a message from cron.

Email from cron

/etc/cron.daily/logrotate:

error: stat of /var/log/boot.log failed: No such file or directory
error: stat of /var/log/cron failed: No such file or directory

Think I solved this one http://linuxbabu.net/2008/07/error-stat … directory/

Undelivered Mail Returned to Sender

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<www@MyDomain.com>: connect to 127.0.0.1[127.0.0.1]:10024: Connection
    refused

<myemail@yahoo.com>: connect to 127.0.0.1[127.0.0.1]:10024: Connection
    refused

X-iRedMail-Queue-ID: 26F6B101906A4
X-iRedMail-Sender: rfc822; www@mydomain.com
Arrival-Date: Fri, 21 Aug 2009 10:04:48 -0500 (CDT)

Final-Recipient: rfc822; www@mydomain.com
Original-Recipient: rfc822;www@mydomain.com
Action: failed
Status: 4.4.1
Diagnostic-Code: X-iRedMail; connect to 127.0.0.1[127.0.0.1]:10024: Connection
    refused

Final-Recipient: rfc822; myemail@yahoo.com
Original-Recipient: rfc822;myemail@yahoo.com
Action: failed
Status: 4.4.1
Diagnostic-Code: X-iRedMail; connect to 127.0.0.1[127.0.0.1]:10024: Connection
    refused

Any ideas?

6 Reply by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

In case it helps I am running MySQL as backend, SPF verify, DKIM virify/sign feature, PostfixAdmin, PhpMyAdmin and Roundcube. Directly from the installation tutorial http://code.google.com/p/iredmail/wiki/Installation

7 Reply by cluke009 (edited by cluke009 2009-08-23 16:06:25)

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

Well I have some good news. My emails are currently residing in the Postfix Mail Queue. Both incoming and Outgoing.

I am receiving this error: Status - connect to 127.0.0.1[127.0.0.1]:10024: Connection refused.

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Questions about DKIM and SPF

I am receiving this error: Status - connect to 127.0.0.1[127.0.0.1]:10024: Connection refused.

Make sure amavisd is running:

# /etc/init.d/amavisd status

If not, restart it should fix your issue.

9 Reply by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

I am getting an error "Can't open PEM file ... Permission denied".

Is this because I am running as root. Do I need to be the amavisd user to do this?

10 Reply by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

Found a solution http://groups.google.com/group/iredmail … cc8f5da68#

setfacl -m u:amavis:r-- /var/lib/dkim/mydomain.com.pem

receive this error -  setfacl: /var/lib/dkim/mydomain.com.pem: Operation not supported

11 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Questions about DKIM and SPF

you can fix it like this:

# chmod +r /var/lib/dkim/mydomain.com.pem

WARNING: it's not recommend to make these files world-readable, and that's why iRedMail force to use advanced file system access control (ACL).

12 Reply by cluke009

  • cluke009
  • Member
  • Offline
  • Registered: 2009-08-22
  • Posts: 8

Re: Questions about DKIM and SPF

Your the man, Thank you! Everything seems to work now.

13 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Questions about DKIM and SPF

Don't forget to share your success story in Success Stories forum.

We have 56 success stories (plus yours) now smile

14 Reply by abe

  • abe
  • Member
  • Offline
  • Registered: 2015-10-13
  • Posts: 1

Re: Questions about DKIM and SPF

For posterity, I was running into issues with no mail delivery as well. Tracked my issue to clam not running. Gave memory error. I am running on a cloud server. I'm cheap so I just added 4GB swap space and rebooted. This fixed the problem smile Was running 512MB RAM.