Re: How can I integrate opensmtpd with opendkim?
On Thu, 2019-10-10 at 18:14 +0200, Martijn van Duren wrote: > Hello Ihor, > > I'm not sure if you want to sign or verify signatures. Ideally I want both: sign my own outgoing emails and verify incoming mails signatures too. Former is probably higher on my priority list. > At the moment we have an API which allows us to write custom plugins Is there a good place to read the docs about the API? > and > I have written a dkim signer myself[0][1], but it's written > specifically > for OpenBSD and I haven't tested it on Linux (probably needs a few > tweaks for that). > > If you want something that does spamfiltering (including dkim verify) > see Gilles' rspamd plugin[2] or Joerg's spamassassin plugin[3]. I will most certainly give it a try. > If you're lazy just wait a few weeks for OpenBSD 6.6 to be released, > which will contain these filters in the package managers. If you > want to stay on Linux see how far you get with compiling these > codebases > yourself and contact me once you need help (at least the dkimsign > one). Thanks a lot. I use Docker (+ Kubernetes) a lot in my setup and I am not sure if OpanBSD has good alternatives, so for now I'd have to stick with Linux. > > [0] http://imperialat.at/dev/libopensmtpd/ > [1] http://imperialat.at/dev/filter-dkimsign/ > [2] https://github.com/poolpOrg/filter-rspamd/ > [3] https://www.umaxx.net
Re: How can I integrate opensmtpd with opendkim?
Hello Ihor, On 10/10/19 5:39 PM, Ihor Antonov wrote: > Hello everyone, > > I am seriously thinking about replacing Postfix with OpenSMTPD on my > Linux box (I am very attracted by configuration simplicity and > security-mindedness of the project) > Good. > > So I found this issue on github where Gilles is redirecting a user's > question to mailing list. > > https://github.com/OpenSMTPD/OpenSMTPD/issues/733 > > Unfortunately I did not find any follow-ups on the subject. Is > opensmtpd + opendkim possible? I know that there is new filter API > released recently, is it something that can be used to achieve this> > Or maybe it is possible to write some sort of C plugin? (akin to table > lookup API) > > I am not looking for any other DKIM solutions (dkimproxy is abandoned, > and as for p5-Mail-DKIM I don't want to introduce Perl into my setup) > > I am very new to OpenSMTPD so I apologize for possibly stupid > questions. I'm not sure if you want to sign or verify signatures. At the moment we have an API which allows us to write custom plugins and I have written a dkim signer myself[0][1], but it's written specifically for OpenBSD and I haven't tested it on Linux (probably needs a few tweaks for that). If you want something that does spamfiltering (including dkim verify) see Gilles' rspamd plugin[2] or Joerg's spamassassin plugin[3]. If you're lazy just wait a few weeks for OpenBSD 6.6 to be released, which will contain these filters in the package managers. If you want to stay on Linux see how far you get with compiling these codebases yourself and contact me once you need help (at least the dkimsign one). > > > Thanks > > --- > Ihor Antonov > > martijn@ [0] http://imperialat.at/dev/libopensmtpd/ [1] http://imperialat.at/dev/filter-dkimsign/ [2] https://github.com/poolpOrg/filter-rspamd/ [3] https://www.umaxx.net
RE: How can I integrate opensmtpd with opendkim?
Hello everyone, I am seriously thinking about replacing Postfix with OpenSMTPD on my Linux box (I am very attracted by configuration simplicity and security-mindedness of the project) So I found this issue on github where Gilles is redirecting a user's question to mailing list. https://github.com/OpenSMTPD/OpenSMTPD/issues/733 Unfortunately I did not find any follow-ups on the subject. Is opensmtpd + opendkim possible? I know that there is new filter API released recently, is it something that can be used to achieve this Or maybe it is possible to write some sort of C plugin? (akin to table lookup API) I am not looking for any other DKIM solutions (dkimproxy is abandoned, and as for p5-Mail-DKIM I don't want to introduce Perl into my setup) I am very new to OpenSMTPD so I apologize for possibly stupid questions. Thanks --- Ihor Antonov
Re: How can I integrate opensmtpd with opendkim?
On Wed, Jan 30, 2019 at 08:18:53PM +0300, Sergey Seacher wrote: > I use Centos 7. There is packages perl-Mail-DKIM and opendkim in repository, > but there is not > dkimproxy. You can also compile it from source. That's what I did some time ago. All the dependencies are available through yum IIRC. Since centos uses systemd you may need a unit file to manage the service. This is what I came up with, though I'm not a systemd-expert nor the postmaster of a busy host. It seems to work tho [Unit] Description=DKIM proxy After=syslog.target network.target [Service] Type=forking ExecStart=/path/to/dkimproxy start ExecReload=/path/to/dkimproxy reload ExecStop=/path/to/dkimproxy stop [Install] WantedBy=multi-user.target > 30.01.2019 19:04, Chris Bennett пишет: > > On Wed, Jan 30, 2019 at 05:45:35PM +0300, Sergey Seacher wrote: > > > Hello, All! > > > > > > How can I integrate opensmtpd with opendkim? > > > > > There is also dkimproxy and a Perl module p5-Mail-DKIM. > > Which one do you recommend, you hinted that there will be changes from > > 6.4 to 6.5 for dkimproxy setup when it comes out, if I understood > > correctly. > > > > I've got things working for 6.4 right now, but I will post a couple of > > questions about using auth and some other stuff I expect/want to use > > shortly. > > > > Thanks, I'm really thrilled to have this massive improvement over > > sendmail!! All of your time doing this work has been so helpful, I > > really hated sendmail with that huge book I had for it. > > > > Chris Bennett > > > > > -- > > С уважением, > Сергей > > > -- > You received this mail because you are subscribed to misc@opensmtpd.org > To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org > -- Omar Polo | PGP: 147F 24EB 977C DFDD 0197 86D3 E483 C355 499D 960D -- You received this mail because you are subscribed to misc@opensmtpd.org To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
Re: How can I integrate opensmtpd with opendkim?
Atm I am using amavisd-new with clamav and spamassassin disabled to sign dkim on a send-only server with opensmtpd. Cheers Giovanni On 1/30/19 6:18 PM, Sergey Seacher wrote: > I use Centos 7. There is packages perl-Mail-DKIM and opendkim in repository, > but there is not > dkimproxy. > > 30.01.2019 19:04, Chris Bennett пишет: >> On Wed, Jan 30, 2019 at 05:45:35PM +0300, Sergey Seacher wrote: >>> Hello, All! >>> >>> How can I integrate opensmtpd with opendkim? >>> >> There is also dkimproxy and a Perl module p5-Mail-DKIM. >> Which one do you recommend, you hinted that there will be changes from >> 6.4 to 6.5 for dkimproxy setup when it comes out, if I understood >> correctly. >> >> I've got things working for 6.4 right now, but I will post a couple of >> questions about using auth and some other stuff I expect/want to use >> shortly. >> >> Thanks, I'm really thrilled to have this massive improvement over >> sendmail!! All of your time doing this work has been so helpful, I >> really hated sendmail with that huge book I had for it. >> >> Chris Bennett >> >> -- You received this mail because you are subscribed to misc@opensmtpd.org To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
Re: How can I integrate opensmtpd with opendkim?
I use Centos 7. There is packages perl-Mail-DKIM and opendkim in repository, but there is not dkimproxy. 30.01.2019 19:04, Chris Bennett пишет: On Wed, Jan 30, 2019 at 05:45:35PM +0300, Sergey Seacher wrote: Hello, All! How can I integrate opensmtpd with opendkim? There is also dkimproxy and a Perl module p5-Mail-DKIM. Which one do you recommend, you hinted that there will be changes from 6.4 to 6.5 for dkimproxy setup when it comes out, if I understood correctly. I've got things working for 6.4 right now, but I will post a couple of questions about using auth and some other stuff I expect/want to use shortly. Thanks, I'm really thrilled to have this massive improvement over sendmail!! All of your time doing this work has been so helpful, I really hated sendmail with that huge book I had for it. Chris Bennett -- С уважением, Сергей -- You received this mail because you are subscribed to misc@opensmtpd.org To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
Re: How can I integrate opensmtpd with opendkim?
On Wed, Jan 30, 2019 at 05:45:35PM +0300, Sergey Seacher wrote: > Hello, All! > > How can I integrate opensmtpd with opendkim? > There is also dkimproxy and a Perl module p5-Mail-DKIM. Which one do you recommend, you hinted that there will be changes from 6.4 to 6.5 for dkimproxy setup when it comes out, if I understood correctly. I've got things working for 6.4 right now, but I will post a couple of questions about using auth and some other stuff I expect/want to use shortly. Thanks, I'm really thrilled to have this massive improvement over sendmail!! All of your time doing this work has been so helpful, I really hated sendmail with that huge book I had for it. Chris Bennett -- You received this mail because you are subscribed to misc@opensmtpd.org To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
