Re: Which DKIM application for postfix 3.9.0

[Peter via dovecot]

On 25/04/24 14:34, Benny Pedersen via dovecot wrote:

+1, thanks for dovecot maillist do it right, postfix maillist fails on spf


You make a confusing, factually incomplete post with claims that are 
incorrect and then complain about a lack of clear response on a 
different list?  If you're going to run down the postfix list for your 
own failure at least have the decency to do it *on* the postfix list.



Peter
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Benny Pedersen via dovecot]

Rupert Gallagher via dovecot skrev den 2024-04-23 15:46:
The developers of DKIM moved on to ARC, then they stopped working on 
ARC also.


No, score=-3.158 tagged_above=-999 required=5 
tests=[AUTHRES_DKIM_PASS=-0.5, AUTHRES_DMARC_PASS=-0.5, 
AUTHRES_SPF_PASS=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, 
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, KAM_ASCII_DIVIDERS=0.64, 
KAM_NUMSUBJECT=0.4, MAILING_LIST_MULTI=-0.1, RCVD_IN_DNSWL_MED=-2.3, 
RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.1, 
SPF_PASS=-0.1, URIBL_SBL_A=0.1] autolearn=unavailable autolearn_force=no


+1, thanks for dovecot maillist do it right, postfix maillist fails on 
spf



https://github.com/fastmail/authentication_milter


no gentoo ebuild yet sadly

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Jack Raats via dovecot]

I'm using dkimproxy together with postfix/dovecot

Gr.,
Jack

Op 24-04-2024 om 11:03 schreef Jean-Daniel Dupas via dovecot:

Talking about completeness, you can also use rspamd (https://www.rspamd.com 
).
While it it design to to more than DKIM, it can be use for it.

I have an internal mailer relay based on postfix and rspamd that works great.



Le 24 avr. 2024 à 09:40, infoomatic via dovecot  a écrit :

Just for completeness sake I will throw some in:

*) https://launchpad.net/dkimpy-milter
*) https://lib.rs/crates/dkim-milter
*) https://github.com/fastmail/authentication_milter

I have not yet had time to look at them, so no comment on their usability.

regards,
Robert


On 24.04.24 00:06, Joseph Tam via dovecot wrote:

On Tue, Apr 23, 2024 at 7:33 AM  wrote:


I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
installs, but I
would like to start now with the new google rules. I have done some research 
and opendkim
  is the most recommended, however, other research states the opendkim has been
abandoned by it's maintainers. So I am looking for a good alternative dkim 
software
that will work with postfix that I can compile myself. I do not run on any linux
version, so therefore I can not just apt-get a new dkim application.
I run Solaris and therefore need to compile my applications, postfix and dkim.
Any good suggestions will be appreciated.

I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

 https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Jean-Daniel Dupas via dovecot]

Talking about completeness, you can also use rspamd (https://www.rspamd.com 
).
While it it design to to more than DKIM, it can be use for it.

I have an internal mailer relay based on postfix and rspamd that works great.


> Le 24 avr. 2024 à 09:40, infoomatic via dovecot  a écrit 
> :
> 
> Just for completeness sake I will throw some in:
> 
> *) https://launchpad.net/dkimpy-milter
> *) https://lib.rs/crates/dkim-milter
> *) https://github.com/fastmail/authentication_milter
> 
> I have not yet had time to look at them, so no comment on their usability.
> 
> regards,
> Robert
> 
> 
> On 24.04.24 00:06, Joseph Tam via dovecot wrote:
>> On Tue, Apr 23, 2024 at 7:33 AM  wrote:
>> 
 I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
 installs, but I
 would like to start now with the new google rules. I have done some 
 research and opendkim
  is the most recommended, however, other research states the opendkim has 
 been
 abandoned by it's maintainers. So I am looking for a good alternative dkim 
 software
 that will work with postfix that I can compile myself. I do not run on any 
 linux
 version, so therefore I can not just apt-get a new dkim application.
 I run Solaris and therefore need to compile my applications, postfix and 
 dkim.
 Any good suggestions will be appreciated.
>> 
>> I just rolled out a locally compiled opendkim on my mail server. It
>> works, but there
>> are a few gotchas.
>> 
>> Although it seems like a moribund project, there is a late beta
>> version that includes
>> some important patches, most notably the "Header:\n LongHeaderValue" bug that
>> needs fixing.  You can look at
>> 
>> https://sourceforge.net/p/opendkim/patches/
>> 
>> to find that patch, as well as others you deem important.  As DKIM standards
>> are not going to change soon, having end-of-line software is not as
>> bad as it seems
>> unless you need particular enhancements to make it work better in your
>> circumstances.
>> Once you get your setup dialed, you can probably set it and forget it.
>> 
>> Most of the headaches have actually been internal: local mail
>> injection via sendmail
>> would skip miltering, From header canonicalization by the MTA would not be
>> seen by the opendkim milter thereby creating messages with missing or invalid
>> signatures, and mailing list/auto reply/forwarder software mangling messages.
>> 
>> I think Postfix does a better job in this regard, so these issues may
>> not present itself.
>> (I did a Postfix/opendkim milter on an Ubuntu system and it was much
>> less hassle.)
>> 
>> You should look at *lots* of DMARC RUA reports.  People are doing crazy 
>> batsh*t
>> stuff with your mail domain.
>> 
>> Joseph Tam 
>> ___
>> dovecot mailing list -- dovecot@dovecot.org
>> To unsubscribe send an email to dovecot-le...@dovecot.org
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[infoomatic via dovecot]

Just for completeness sake I will throw some in:

*) https://launchpad.net/dkimpy-milter
*) https://lib.rs/crates/dkim-milter
*) https://github.com/fastmail/authentication_milter

I have not yet had time to look at them, so no comment on their usability.

regards,
Robert


On 24.04.24 00:06, Joseph Tam via dovecot wrote:

On Tue, Apr 23, 2024 at 7:33 AM  wrote:


I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
installs, but I
would like to start now with the new google rules. I have done some research 
and opendkim
  is the most recommended, however, other research states the opendkim has been
abandoned by it's maintainers. So I am looking for a good alternative dkim 
software
that will work with postfix that I can compile myself. I do not run on any linux
version, so therefore I can not just apt-get a new dkim application.
I run Solaris and therefore need to compile my applications, postfix and dkim.
Any good suggestions will be appreciated.


I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

 https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

RE: Which DKIM application for postfix 3.9.0

[Joseph Tam via dovecot]

On Tue, Apr 23, 2024 at 7:33 AM  wrote:

> > I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
> > installs, but I
>> would like to start now with the new google rules. I have done some research 
>> and opendkim
>>  is the most recommended, however, other research states the opendkim has 
>> been
>> abandoned by it's maintainers. So I am looking for a good alternative dkim 
>> software
>> that will work with postfix that I can compile myself. I do not run on any 
>> linux
>> version, so therefore I can not just apt-get a new dkim application.
>> I run Solaris and therefore need to compile my applications, postfix and 
>> dkim.
>> Any good suggestions will be appreciated.

I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Benny Pedersen via dovecot]

Jeroen de Meijer via dovecot skrev den 2024-04-23 16:21:
I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively 
maintained.


all in one basket only makes crumpled eggs :)

i do dkim signing in amavisd, and dkim reporting from spamassassin, lots 
more flexible then understanding bugs in rspamd


hope arc will be supported in next amavisd

maybe as a amavisd-custom hook





___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

RE: Which DKIM application for postfix 3.9.0

[Marc via dovecot]

I can remember looking at rspamd years ago. I thought it was a bit chaotic with 
all these rules. I can even remember asking developers some design questions 
which they could not answer. The fact that they generate their own graphs 
(still?) is also old fashioned. This Sergey that is working on mailfromd is an 
ace with mta's, even implemented for me an exporter endpoint, so now I can 
chart whatever I want.

> 
> I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively
> maintained.
> 
> > On 23 Apr 2024, at 15:50, Rupert Gallagher via dovecot
>  wrote:
> >
> > The developers of DKIM moved on to ARC, then they stopped working on
> ARC also.
> >
> > Try this:
> >
> > https://github.com/fastmail/authentication_milter
> >
> >>
> >> I am upgrading to postfix 3.9.0. I have not used DKIM in previous
> postfix installs, but I would like to start now with the new google
> rules. I have done some research and opendkim is the most recommended,
> however, other research states the opendkim has been abandoned by it's
> maintainers. So I am looking for a good alternative dkim software that
> will work with postfix that I can compile myself. I do not run on any
> linux version, so therefore I can not just apt-get a new dkim
> application. I run Solaris and therefore need to compile my applications,
> postfix and dkim. Any good suggestions will be appreciated.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Jeroen de Meijer via dovecot]

I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively 
maintained.

> On 23 Apr 2024, at 15:50, Rupert Gallagher via dovecot  
> wrote:
> 
> The developers of DKIM moved on to ARC, then they stopped working on ARC 
> also.
> 
> Try this:
> 
> https://github.com/fastmail/authentication_milter
> 
>  Original Message 
>> On Mar 11, 2024, 23:21, wrote:
>> 
>> I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
>> installs, but I would like to start now with the new google rules. I have 
>> done some research and opendkim is the most recommended, however, other 
>> research states the opendkim has been abandoned by it's maintainers. So I am 
>> looking for a good alternative dkim software that will work with postfix 
>> that I can compile myself. I do not run on any linux version, so therefore I 
>> can not just apt-get a new dkim application. I run Solaris and therefore 
>> need to compile my applications, postfix and dkim. Any good suggestions will 
>> be appreciated. ___ dovecot 
>> mailing list -- dovecot@dovecot.org To unsubscribe send an email to 
>> dovecot-le...@dovecot.org
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

RE: Which DKIM application for postfix 3.9.0

[Marc via dovecot]

> > I am upgrading to postfix 3.9.0. I have not used DKIM in previous
> postfix installs, but I would like to start now with the new google
> rules. I have done some research and opendkim is the most recommended,
> however, other research states the opendkim has been abandoned by it's
> maintainers. So I am looking for a good alternative dkim software that
> will work with postfix that I can compile myself. I do not run on any
> linux version, so therefore I can not just apt-get a new dkim
> application. I run Solaris and therefore need to compile my applications,
> postfix and dkim. Any good suggestions will be appreciated.

I am super pleased with mailfromd! Running dkim for quite some time now.  
https://www.gnu.org.ua/software/mailfromd/manual/html_chapter/index.html#SEC_Contents

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Rupert Gallagher via dovecot]

The developers of DKIM moved on to ARC, then they stopped working on ARC also.

Try this:

https://github.com/fastmail/authentication_milter

 Original Message 
On Mar 11, 2024, 23:21, wrote:

> I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
> installs, but I would like to start now with the new google rules. I have 
> done some research and opendkim is the most recommended, however, other 
> research states the opendkim has been abandoned by it's maintainers. So I am 
> looking for a good alternative dkim software that will work with postfix that 
> I can compile myself. I do not run on any linux version, so therefore I can 
> not just apt-get a new dkim application. I run Solaris and therefore need to 
> compile my applications, postfix and dkim. Any good suggestions will be 
> appreciated. ___ dovecot mailing 
> list -- dovecot@dovecot.org To unsubscribe send an email to 
> dovecot-le...@dovecot.org
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Which DKIM application for postfix 3.9.0

[Dave Ryan]

Sorry, wrong group.   Please ignore.

On 03/07/24 13:50, dove...@outputservices.com wrote:

I am upgrading to postfix 3.9.0.

I have not used DKIM in previous postfix installs, but I would like to 
start now with the new google rules.


I have done some research and opendkim is the most recommended, 
however, other research states the opendkim has been abandoned by it's 
maintainers.


So I am looking for a good alternative dkim software that will work 
with postfix that I can compile myself.


I do not run on any linux version, so therefore I can not just apt-get 
a new dkim application.


I run Solaris and therefore need to compile my applications, postfix 
and dkim.


Any good suggestions will be appreciated.


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Which DKIM application for postfix 3.9.0

[dovecot]

I am upgrading to postfix 3.9.0.

I have not used DKIM in previous postfix installs, but I would like to 
start now with the new google rules.


I have done some research and opendkim is the most recommended, however, 
other research states the opendkim has been abandoned by it's maintainers.


So I am looking for a good alternative dkim software that will work with 
postfix that I can compile myself.


I do not run on any linux version, so therefore I can not just apt-get a 
new dkim application.


I run Solaris and therefore need to compile my applications, postfix and 
dkim.


Any good suggestions will be appreciated.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org