Re: [qmailtoaster] DKIM seems now to be required by Outlook

2024-06-20 Thread Philip Nix Guru 

Hello

To answer the original question

1 key for all, it is possible yes

I did that on a specific setup for a customer

I am using a qmail serveur acting as a smarthost (defined on another 
qmail server in the smtproute file)


but that's not really a problem if you use only 1 server



check your /var/qmail/control/me domain listed there

set the key  for that fqdn


ADD the dns entries ONLY in the zone file matching the fqdn of your 
qmail server (not in the other zone files of your other domains of course)


that's it

all emails going out of your server are signed with the unique global.key


Send a mail to a gmail account and you ll see it is signed

with the global key for that "sending" server.

For debug purpose in gmail check the option "original message" if you 
see signed, all good, otherwise click on learn and you ll get more infos 
(like you used wrong fqdn))



I noticed on a very particular scenario, some weird config on a 
destination server, I had to add in the dns zone file a MX record 
matching the "/var/qmail/control/me domain"


but that was only once.

Regards

-P


On 6/20/24 03:32, Remo Mattei wrote:

I have dkim setup on several domains and all good! :)

On Jun 19, 2024, at 6:31 PM, Jeff Koch  
wrote:


They seem to work for me.

http://www.qmailtoaster.com/dkim.html

Jeff

On 6/19/2024 8:30 PM, Chris Knight wrote:

The wiki says that Domain Keys are broken, and will be removed from future 
releases.  What does that mean for DKIM support?

http://wiki.qmailtoaster.com/index.php?title=Disabling_Domain_Keys



On Jun 20, 2024, at 12:01 PM, Jeff Koch  wrote:

QMT'ers

Emails to Outlook accounts started bouncing today until we added unique dkim 
keys and DNS records to the sender domains.  So now we'll probably need to do 
the same for all the accounts we do email for.

So I was thinking it would be a whole lot easier if we gave everyone the same 
key and DNS text record. Then the question is whether we can setup a wildcard 
signconf.xml stanza something like:


   < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
selector="dkim1">
 
 
   


Any thoughts on whether this is doable or advisable ?

Jeff

-
To unsubscribe, e-mail:[email protected]
For additional commands, e-mail:[email protected]

Re: [qmailtoaster] DKIM seems now to be required by Outlook

2024-06-19 Thread Eric Broch 

That page I did not see in renovating the wiki. I'll delete it.

That page is referring to domain keys (DK). We now use domain keys 
identified mail (DKIM).


DK has been removed from qmail...it used to be compiled in. Now we use a 
perl wrapper.



On 6/19/2024 6:30 PM, Chris Knight wrote:

The wiki says that Domain Keys are broken, and will be removed from future 
releases.  What does that mean for DKIM support?

http://wiki.qmailtoaster.com/index.php?title=Disabling_Domain_Keys



On Jun 20, 2024, at 12:01 PM, Jeff Koch  wrote:

QMT'ers

Emails to Outlook accounts started bouncing today until we added unique dkim 
keys and DNS records to the sender domains.  So now we'll probably need to do 
the same for all the accounts we do email for.

So I was thinking it would be a whole lot easier if we gave everyone the same 
key and DNS text record. Then the question is whether we can setup a wildcard 
signconf.xml stanza something like:


   < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
selector="dkim1">
 
 
   


Any thoughts on whether this is doable or advisable ?

Jeff


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Re: [qmailtoaster] DKIM seems now to be required by Outlook

2024-06-19 Thread Remo Mattei 
I have dkim setup on several domains and all good! :) 

> On Jun 19, 2024, at 6:31 PM, Jeff Koch  wrote:
> 
> They seem to work for me.
> 
> http://www.qmailtoaster.com/dkim.html
> 
> Jeff
> 
> On 6/19/2024 8:30 PM, Chris Knight wrote:
>> The wiki says that Domain Keys are broken, and will be removed from future 
>> releases.  What does that mean for DKIM support?
>> 
>> http://wiki.qmailtoaster.com/index.php?title=Disabling_Domain_Keys
>> 
>> 
>>> On Jun 20, 2024, at 12:01 PM, Jeff Koch  
>>>  wrote:
>>> 
>>> QMT'ers
>>> 
>>> Emails to Outlook accounts started bouncing today until we added unique 
>>> dkim keys and DNS records to the sender domains.  So now we'll probably 
>>> need to do the same for all the accounts we do email for. 
>>> 
>>> So I was thinking it would be a whole lot easier if we gave everyone the 
>>> same key and DNS text record. Then the question is whether we can setup a 
>>> wildcard signconf.xml stanza something like:
>>> 
>>> 
>>>   < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
>>> selector="dkim1">
>>> 
>>> 
>>>   
>>> 
>>> 
>>> Any thoughts on whether this is doable or advisable ?
>>> 
>>> Jeff
>> 
>> -
>> To unsubscribe, e-mail: [email protected] 
>> 
>> For additional commands, e-mail: [email protected] 
>> 
>> 
>

Re: [qmailtoaster] DKIM seems now to be required by Outlook

2024-06-19 Thread Jeff Koch 

They seem to work for me.

http://www.qmailtoaster.com/dkim.html

Jeff

On 6/19/2024 8:30 PM, Chris Knight wrote:

The wiki says that Domain Keys are broken, and will be removed from future 
releases.  What does that mean for DKIM support?

http://wiki.qmailtoaster.com/index.php?title=Disabling_Domain_Keys



On Jun 20, 2024, at 12:01 PM, Jeff Koch  wrote:

QMT'ers

Emails to Outlook accounts started bouncing today until we added unique dkim 
keys and DNS records to the sender domains.  So now we'll probably need to do 
the same for all the accounts we do email for.

So I was thinking it would be a whole lot easier if we gave everyone the same 
key and DNS text record. Then the question is whether we can setup a wildcard 
signconf.xml stanza something like:


   < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
selector="dkim1">
 
 
   


Any thoughts on whether this is doable or advisable ?

Jeff


-
To unsubscribe, e-mail:[email protected]
For additional commands, e-mail:[email protected]

Re: [qmailtoaster] DKIM seems now to be required by Outlook

2024-06-19 Thread Chris Knight 
The wiki says that Domain Keys are broken, and will be removed from future 
releases.  What does that mean for DKIM support?

http://wiki.qmailtoaster.com/index.php?title=Disabling_Domain_Keys


> On Jun 20, 2024, at 12:01 PM, Jeff Koch  wrote:
> 
> QMT'ers
> 
> Emails to Outlook accounts started bouncing today until we added unique dkim 
> keys and DNS records to the sender domains.  So now we'll probably need to do 
> the same for all the accounts we do email for. 
> 
> So I was thinking it would be a whole lot easier if we gave everyone the same 
> key and DNS text record. Then the question is whether we can setup a wildcard 
> signconf.xml stanza something like:
> 
> 
>   < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
> selector="dkim1">
> 
> 
>   
> 
> 
> Any thoughts on whether this is doable or advisable ?
> 
> Jeff


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

[qmailtoaster] DKIM seems now to be required by Outlook

2024-06-19 Thread Jeff Koch 

QMT'ers

Emails to Outlook accounts started bouncing today until we added unique 
dkim keys and DNS records to the sender domains.  So now we'll probably 
need to do the same for all the accounts we do email for.


So I was thinking it would be a whole lot easier if we gave everyone the 
same key and DNS text record. Then the question is whether we can setup 
a wildcard signconf.xml stanza something like:



  < * domain="*" keyfile="/var/qmail/control/dkim/wildcard.key" 
selector="dkim1">

    
    
  


Any thoughts on whether this is doable or advisable ?

Jeff