roundcube and opendkim

Discussion in 'Installation/Configuration' started by muekno, Mar 1, 2023.

  1. muekno

    muekno Active Member HowtoForge Supporter

  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Rspamd or Amavis does DKIM signing on your system, depending on the age of your setup. Rspamd is used on recent systems while old systems use Amavis. OpenDkim is not used or required for that at all. The post you mentioned is incompatible with any ISPConfig system, so do not follow its instructions. To enable DKIM signing for a domain, all you have to do is to enable that function in mail domain settings in ISPConfig and create a DKIM key there. See the beginner tutorial on how to add your first mailbox: https://www.howtoforge.com/ispconfig-email-account/ to get started using ISPConfig.

    And as a side note, RoundCube is not related to OpenDkim directly. RoundCube is just an email client like Thunderbird or Outlook. It does not do Dkim signing. It also does not matter which mail client you use, so if you use RoundCube or Thunderbird, or Apple mail does not matter for Dkim.
     
    Last edited: Mar 2, 2023
    muekno likes this.
  3. muekno

    muekno Active Member HowtoForge Supporter

    Thank you very much
    Rainer

    OK that works but what about DMARC, DKIM seems to a part of it
     
    Last edited: Mar 2, 2023
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    DMARC is a DNS TXT record that you set in your DNS server.
     
  5. muekno

    muekno Active Member HowtoForge Supporter

    Still one question: I relay mail (for three domains) to local (relay recipients @domain.de) users to my personal mailserver (Set up with ISPConfig too) there I do my personal SPAM filtering via rspamd before I reroute again @domain.de to my final Mail System Micro Focus Groupwise, outgoing mail went reverse GroupWise -> local Postfix -> official Postfix on my Server in the datacenter , where everything, Mail, Mailboxes for Cutommers , Websites, Primary DNS ... is running

    But I find nothing to create DKIM for the routed mails, where do I have to create the DKIM, I think at master mailserver, manualy.

    the test I im doing now is with a registrated test domain that has mailboxes on the main server

    Rainer
     
  6. muekno

    muekno Active Member HowtoForge Supporter

    OK to clarify
    server1 setup with you script, has public IP address
    server2 mail server in a multiserver ISPConfig system has private IP address reached via NAT (Fritz Box) DSL Connection with fixed IP

    server1 is on a public ip address, running all services ISPConfig provides (mail, web, dns etc.)
    is mx for domain A, B, C, D, is primary DNS for domain A, B, C, D
    is mailserver for domain A, B has mailboxes for domain A, B (dovecot, roundcube)
    is mail relay for all users in domain C, D, configured, via mail (email routing, relay domains, relay recipiants) forwards to public address of server2

    For domain A, B, the DKIM record may be created via mail -> domain.
    As I found out earlier if I configure domain C, D there too, the routing for these does not work any more, so I can not add teh there.

    So what to do,
    I can create the keys and add a DKIM in DNS for domain C, D manualy but where to do the private key. You store both keys under /var/lib/amavis/dkim/domainA.public respective .private and you have an entry in /etc/rspamd/local.d/ dkim_selectors.map "domainA default". I may add respective entries for domain C, D.
    But a) is that all, and if I do will I break the system or
    b) does'nt it work at all, as postfix does not care about all this when relaying
    Or what is your recomotation or solution.

    Is is not unusual to have postfix with a public address and all ist posibilities of filters and SPAM protection in front of a private mailsystem on a private network.
    Thanks for any help

    regards Rainer
     

Share This Page