DKIM & ISPConfig

Discussion in 'Installation/Configuration' started by pssadm, Feb 8, 2024.

Tags:
  1. pssadm

    pssadm Member

    Does anyone know if OpenDKIM needs to be installed in order to get outgoing email signed? I've added the DKIM through the ISPConfig Email, Domain, DKIM section. Then added the key to my DNS. If I test it directly using mxtoolbox or other by entering "Domain.com:selector" it comes back with the key. Now when I run a test on DKIM through appmaildev.com that checks the raw information it outputs:

    Code:
    DKIM: none
    DKIM-Result: none (no signature)
    I'm also wondering if the default Ubuntu18/Postfix/Dovecot/Apache install looks for SPF/DKIM records and denotes the PASS/FAIL into the message header. In reading a bit more, I don't have Amavis installed in my implementation because i use a relayhost to send mail. Should I be installing Amavis in order to make this work? Nervous to install anything in a working environment that may break the machine. o_O:)

    Okay, I'm fairly certain I need to get Amavis installed to make DKIM sign outgoing emails. Is there anyway to reconfigure ISPconfig at this stage in the game without messing up the whole thing? I remember once running an ISPConfig_Update.sh script and it asked if I wanted to enable items... would that be safe at this point?

    As always, thank you for taking the time to reply in advance.
    Ben
     
    Last edited: Feb 8, 2024
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    ISPConfig is not using amavis anymore, it uses Rspamd for DKIM signing on any recent installation. Amavis was used in the past. So please do not try to install Amavis on a system that uses Rspamd as it will completely mess up your system. Yo do not need Amavis when Rspamd is installed and vice versa.

    And do not install OpenDkim, it is not used on ISPConfig systems and it should not be installed on your server.

    I do not know that software but I've seen that such test websites show wrong results. So instead of relying on such a test site, better take a look at the email headers yourself. You must check an email that was sent with a normal email client that properly authenticated itself on your system.

    And you should run the test script and post its output: https://forum.howtoforge.com/threads/please-read-before-posting.58408/

    Please run the test script and post the result:

    https://forum.howtoforge.com/threads/please-read-before-posting.58408/
     

Share This Page