Re: [gentoo-user] Postfix and Domainkeys
On 14.01.2009 06:24, Jason Carson wrote: On 12.01.2009 00:13, Jason Carson wrote: Greetings, I am trying to setup postfix with domainkeys. I installed dk-milter and ran the following as I was told to do after emerging it ... DomainKeys is deprecated and is replaced by DKIM. You are much better off using mail-filter/dkim-milter. If you are using amavisd-new with your postfix, I suggest you use amavisd-new to check and sign your mail and do not use milters at all. Can I use both dk-milter and dkim-milter simultaneously? Yes you can use both simultaneously. First sign with domainkeys and then with DKIM. -- Eray
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 17:33, Jason Carson wrote: [...] I don't understand what this part below means... Make sure you add these parameters to your dk-filter command line: -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default I tried the following two commands with no luck dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...and... /etc/init.d/dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...any other suggestions or am I doing something wrong? It's been awhile but: Make the necessary changes: vi /etc/mail/dk-filter/dk-filter.conf and start the milter: /etc/init.d/dk-filter start -- Eray ok, the file is /usr/portage/mail-filter/dk-milter/files/dk-filter.conf or /etc/conf.d/dk-filter (they both look the same when you open them up)so I modified /etc/conf.d/dk-filter and started the milter but Postfix still isn't signing emails. The only two options I was told to add to the postfix main.cf file was... smtpd_milters = unix:/var/run/dk-filter/dk-filter.sock non_smtpd_milters = unix:/var/run/dk-filter/dk-filter.sock Here is what I have added to /etc/conf.d/dk-filter ADDITIONAL_OPTS=-l -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/jason.private -S jason \ -C badsignature=reject,dnserror=tempfail,internal=tempfail,nosignature=accept,signaturemissing=reject The emails are now being signed with a domainkey but when I run a test here http://www.mailradar.com/domainkeys/ it comes back as... Domain-Key Status: NOT PASSED Anyone have any suggestions as to what I am doing wrong?
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 00:13, Jason Carson wrote: Greetings, I am trying to setup postfix with domainkeys. I installed dk-milter and ran the following as I was told to do after emerging it ... DomainKeys is deprecated and is replaced by DKIM. You are much better off using mail-filter/dkim-milter. If you are using amavisd-new with your postfix, I suggest you use amavisd-new to check and sign your mail and do not use milters at all. Can I use both dk-milter and dkim-milter simultaneously? [...] * After you configured your MTA, publish your key by adding this TXT record to your domain: * default._domainkey IN TXT g=; k=rsa; t=y; o=~; p=keygoeshere * t=y signifies you only test the DK on your domain. * See the DomainKeys specification for more info. but I don't understand what this part mean... You need to publish your public key in your DNS server so that others can check your signature. * Make sure you add these parameters to your dk-filter command line: * -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default ...Anyone know what to do? You need to read up on DKIM (or domainkeys if you want to go that way). Links below should get you started: http://www.dkim.org/ http://en.wikipedia.org/wiki/DomainKeys http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim http://www.postfix.org/MILTER_README.html -- Eray
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 00:13, Jason Carson wrote: Greetings, I am trying to setup postfix with domainkeys. I installed dk-milter and ran the following as I was told to do after emerging it ... DomainKeys is deprecated and is replaced by DKIM. You are much better off using mail-filter/dkim-milter. If you are using amavisd-new with your postfix, I suggest you use amavisd-new to check and sign your mail and do not use milters at all. [...] * After you configured your MTA, publish your key by adding this TXT record to your domain: * default._domainkey IN TXT g=; k=rsa; t=y; o=~; p=keygoeshere * t=y signifies you only test the DK on your domain. * See the DomainKeys specification for more info. but I don't understand what this part mean... You need to publish your public key in your DNS server so that others can check your signature. * Make sure you add these parameters to your dk-filter command line: * -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default ...Anyone know what to do? You need to read up on DKIM (or domainkeys if you want to go that way). Links below should get you started: http://www.dkim.org/ http://en.wikipedia.org/wiki/DomainKeys http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim http://www.postfix.org/MILTER_README.html -- Eray
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 00:13, Jason Carson wrote: Greetings, I am trying to setup postfix with domainkeys. I installed dk-milter and ran the following as I was told to do after emerging it ... DomainKeys is deprecated and is replaced by DKIM. You are much better off using mail-filter/dkim-milter. If you are using amavisd-new with your postfix, I suggest you use amavisd-new to check and sign your mail and do not use milters at all. [...] * After you configured your MTA, publish your key by adding this TXT record to your domain: * default._domainkey IN TXT g=; k=rsa; t=y; o=~; p=keygoeshere * t=y signifies you only test the DK on your domain. * See the DomainKeys specification for more info. but I don't understand what this part mean... I don't understand what this part below means... Make sure you add these parameters to your dk-filter command line: -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default I tried the following two commands with no luck dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...and... /etc/init.d/dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...any other suggestions or am I doing something wrong? http://www.dkim.org/ http://en.wikipedia.org/wiki/DomainKeys http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim http://www.postfix.org/MILTER_README.html Thanks for the links, I will check them out.
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 17:33, Jason Carson wrote: [...] I don't understand what this part below means... Make sure you add these parameters to your dk-filter command line: -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default I tried the following two commands with no luck dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...and... /etc/init.d/dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...any other suggestions or am I doing something wrong? It's been awhile but: Make the necessary changes: vi /etc/mail/dk-filter/dk-filter.conf and start the milter: /etc/init.d/dk-filter start -- Eray
Re: [gentoo-user] Postfix and Domainkeys
On 12.01.2009 17:33, Jason Carson wrote: [...] I don't understand what this part below means... Make sure you add these parameters to your dk-filter command line: -b sv -d your-domain.com -H -s /etc/mail/dk-filter/default.private -S default I tried the following two commands with no luck dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...and... /etc/init.d/dk-filter -b sv -d jasoncarson.ca -H -s /etc/mail/dk-filter/default.private -S default ...any other suggestions or am I doing something wrong? It's been awhile but: Make the necessary changes: vi /etc/mail/dk-filter/dk-filter.conf and start the milter: /etc/init.d/dk-filter start -- Eray ok, the file is /usr/portage/mail-filter/dk-milter/files/dk-filter.conf or /etc/conf.d/dk-filter (they both look the same when you open them up)so I modified /etc/conf.d/dk-filter and started the milter but Postfix still isn't signing emails. The only two options I was told to add to the postfix main.cf file was... smtpd_milters = unix:/var/run/dk-filter/dk-filter.sock non_smtpd_milters = unix:/var/run/dk-filter/dk-filter.sock
