On Mon, Jun 20, 2011 at 3:51 PM, Parker, Joshua <[email protected]> wrote: > Try changing the Signing Domain to below, and see if that fixes your issue: > > SIGNING_DOMAIN="*" > > > >
Hi, I'm still getting following error Authentication-Results: mta130.mail.sp2.yahoo.com from=; domainkeys=neutral (no sig); from=domain.com; dkim=permerror (bad sig) > > --- > > Joshua Parker > http://classblogs.us > [email protected] > > On Mon, 20 Jun 2011 15:40:00 +0530, Suresh Kumar Prajapati wrote: > > Hi , > > thanx for reply. > > I've gone through the configuration but the problem is my second > option in the keylist file runs well but the second gives me a bad > sign =perm error > here is my /etc/sysconfig/dkim-filter > > USER="dkim-milter" > SOCKET="inet:8891@localhost" > #PORT="inet:10034@localhost" > SIGNING_DOMAIN="domain1.com,domain2.com" > #SELECTOR_NAME="dktest" > KEYLIST="/etc/mail/domainkeys/keys/keylist" > SIGNER=yes > VERIFIER=yes > CANON=simple > SIGALG=rsa-sha1 > REJECTION="bad=r,dns=t,int=t,no=a,miss=r" > EXTRA_ARGS="-h -l -D" > MILTER_GROUP="mail" > > and my kelist file is > > > *@domain1.com:domain1.com:/etc/mail/dkim-milter/keys/domain1/domain1 > *@domain2.com:domain2.com:/etc/mail/dkim-milter/keys/domain2/domain2 > > Please help m stuck . > > On Mon, Jun 20, 2011 at 12:52 PM, Patrick Ben Koetter > <[email protected]> wrote: > > Am 20.06.2011 07:50, schrieb Suresh Kumar Prajapati: > > Hi, Can anyone tell me how to sign mails for multiple domains . > > My recommendation: Drop dkim-milter because IIRC it is unmaintained. Get the > followup opendkim <http://opendkim.org> instead. If you follow dkim-filter > read into KeyList: # KeyList is a file containing tuples of key information. > Requires # KeyFile to be unset. Each line of the file should be of the > format: # sender glob:signing domain:signing key file # Blank lines and > lines beginning with # are ignored. Selector will be # derived from the > key's filename. #KeyList /etc/dkim-keys.conf p@rick > > here is my dkim conf file # To sign only, use -bs # EXTRA_FLAGS=-bs > USER="dkim-milter" SOCKET="inet:8891@localhost" #PORT="inet:10034@localhost" > SIGNING_DOMAIN="" SELECTOR_NAME="dktest" > KEYFILE="/etc/mail/domainkeys/dkim_${SELECTOR_NAME}.pem" SIGNER=yes > VERIFIER=yes CANON=simple SIGALG=rsa-sha1 > REJECTION="bad=r,dns=t,int=t,no=a,miss=r" EXTRA_ARGS="-h -l -D" > MILTER_GROUP="mail" > > -- state of mind () Digitale Kommunikation http://www.state-of-mind.de > Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München > Telefax +49 89 3090 4666 Amtsgericht München > Partnerschaftsregister PR 563 > > -- Best Regards, Suresh Kumar Prajapati Linux Security Admin E-mail: > [email protected] > ---------------------------------------------------------------------------------------- > Pencils could be made with erasers at both ends, but what would be the > point? -- Best Regards, Suresh Kumar Prajapati Linux Security Admin E-mail: [email protected] ---------------------------------------------------------------------------------------- Pencils could be made with erasers at both ends, but what would be the point?
