Rspamd DKIM not work

Discussion in 'ISPConfig 3 Priority Support' started by ktownmods, Nov 20, 2019.

  1. ktownmods

    ktownmods Member HowtoForge Supporter

    Hey,

    since i switched to Rspamd (https://www.howtoforge.com/replacing-amavisd-with-rspamd-in-ispconfig/) E-Mails not signed with DKIM.

    I created DKIM under the Mail domain 2 time new but nothing work.

    Also tried this https://www.howtoforge.com/community/threads/rspamd-greylist-dkim-keys-not-loaded.82823/, but not help

    I use Debian 10.2, ad DKIM is in the DNS

    /etc/rspamd/local.d/dkim_signing.conf
    Code:
    try_fallback = false;
    path_map = "/etc/rspamd/local.d/dkim_domains.map";
    selector_map = "/etc/rspamd/local.d/dkim_selectors.map";
    /etc/rspamd/local.d/dkim_domains.map
    Code:
    my-domain.de /var/lib/amavis/dkim/my-domain.de.private
    
    /etc/rspamd/local.d/dkim_selectors.map
    Code:
    my-domain.de default
    
    Code:
    ls -la /var/lib/amavis/dkim/
    insgesamt 16
    drwxr-x--- 2 amavis amavis 4096 Nov 20 20:07 .
    drwxr-x--- 7 amavis amavis 4096 Nov 20 14:33 ..
    -rw-r--r-- 1 root   root   3294 Nov 20 20:07 my-domain.de.private
    -rw-r--r-- 1 root   root    800 Nov 20 20:07 my-domain.de.public
    Code:
    groups _rspamd
    _rspamd : _rspamd amavis
     
  2. ktownmods

    ktownmods Member HowtoForge Supporter

    So, i use RainLoop as web-interface, i test it with roundcube and it signed with dkim, if i send with rainloop it dont sign with dkim, hmm
     
  3. ktownmods

    ktownmods Member HowtoForge Supporter

    I dont know why, but now it works.
     
  4. ktownmods

    ktownmods Member HowtoForge Supporter

  5. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    If you did
    Code:
    systemctl disable amavisd-new
    amavis-new is disabled and should not start if it not enabled back.
     
  6. ktownmods

    ktownmods Member HowtoForge Supporter

    Yeah i did that, but After reboot amavis starts...

    I redoo that tonight and then i post it, if it not work
     
  7. ktownmods

    ktownmods Member HowtoForge Supporter

    So i put in the commandline:

    Code:
    systemctl stop amavisd-new
    systemctl disable amavisd-new
    and after reboot:

    Code:
    service amavisd-new status
    ● amavis.service - LSB: Starts amavisd-new mailfilter
       Loaded: loaded (/etc/init.d/amavis; generated)
       Active: active (running) since Sun 2019-11-24 20:16:59 CET; 1min 13s ago
         Docs: man:systemd-sysv-generator(8)
      Process: 430 ExecStart=/etc/init.d/amavis start (code=exited, status=0/SUCCESS)
        Tasks: 3 (limit: 4915)
       Memory: 157.6M
       CGroup: /system.slice/amavis.service
               ├─ 959 /usr/sbin/amavisd-new (master)
               ├─1083 /usr/sbin/amavisd-new (virgin child)
               └─1084 /usr/sbin/amavisd-new (virgin child)
    
    Nov 24 20:16:59 mail amavis[959]: No ext program for   .rpm, tried: rpm2cpio.pl, rpm2cpio
    Nov 24 20:16:59 mail amavis[959]: No ext program for   .rar, tried: unrar-free
    Nov 24 20:16:59 mail amavis[959]: No ext program for   .zoo, tried: zoo
    Nov 24 20:16:59 mail amavis[959]: No ext program for   .doc, tried: ripole
    Nov 24 20:16:59 mail amavis[959]: No decoder for       .F
    Nov 24 20:16:59 mail amavis[959]: No decoder for       .doc
    Nov 24 20:16:59 mail amavis[959]: No decoder for       .lz4
    Nov 24 20:16:59 mail amavis[959]: No decoder for       .zoo
    Nov 24 20:16:59 mail amavis[959]: Using primary internal av scanner code for ClamAV-clamd
    Nov 24 20:16:59 mail amavis[959]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Maybe it gets started by server monitoring, did you turn on anything under System > Server config on the rescue tab of the form?
     
  9. ktownmods

    ktownmods Member HowtoForge Supporter

    Hey,

    Nope, nothing is Checked unser the rescue tab
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    Do you use any other monitoring software that might start amavis on its own like monit?
     
  11. ktownmods

    ktownmods Member HowtoForge Supporter

    Only Munin
     
  12. ktownmods

    ktownmods Member HowtoForge Supporter

    Now i have the same problem.

    Amavis gets started after every reboot

    How can i find out what start this?

    Also dkim not work now booth roundcube or rainloop
     
    Last edited: Feb 28, 2020
  13. till

    till Super Moderator Staff Member ISPConfig Developer

    Just disable amavis service with systemctld command or update-rc.d command, depending on your setup when it gets started.
     
  14. ktownmods

    ktownmods Member HowtoForge Supporter

    as a mentonied earlier it now work

    i run


    Code:
    service amavisd-new stop
    systemctl disable amavisd-new
    
    then i reboot


    Code:
    service amavisd-new status
    ● amavis.service - LSB: Starts amavisd-new mailfilter
       Loaded: loaded (/etc/init.d/amavis; generated)
       Active: active (running) since Fri 2020-02-28 13:54:24 UTC; 58s ago
         Docs: man:systemd-sysv-generator(8)
      Process: 762 ExecStart=/etc/init.d/amavis start (code=exited, status=0/SUCCESS)
        Tasks: 3 (limit: 4915)
       CGroup: /system.slice/amavis.service
               ├─2047 /usr/sbin/amavisd-new (master)
               ├─2268 /usr/sbin/amavisd-new (virgin child)
               └─2269 /usr/sbin/amavisd-new (virgin child)
    
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .jar
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .lha
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .lrz
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .lz4
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .rar
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .rpm
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .swf
    Feb 28 13:54:24 mail amavis[2047]: No decoder for       .zoo
    Feb 28 13:54:24 mail amavis[2047]: Using primary internal av scanner code for ClamAV-clamd
    Feb 28 13:54:24 mail amavis[2047]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
     
  15. till

    till Super Moderator Staff Member ISPConfig Developer

    Please rearead my answer, I told you two different commands that you can try, you used just one. So next, use the other. And if this does not help, then you might have configured a different software to auto-start it on your server.
     
  16. ktownmods

    ktownmods Member HowtoForge Supporter

    Code:
    service amavisd-new stop
    update-rc.d -f amavisd-new remove
    
    reboot

    Code:
    service amavisd-new status
    ● amavis.service - LSB: Starts amavisd-new mailfilter
       Loaded: loaded (/etc/init.d/amavis; generated)
       Active: active (running) since Fri 2020-02-28 14:13:32 UTC; 1min 8s ago
         Docs: man:systemd-sysv-generator(8)
      Process: 749 ExecStart=/etc/init.d/amavis start (code=exited, status=0/SUCCESS)
        Tasks: 3 (limit: 4915)
       CGroup: /system.slice/amavis.service
               ├─2057 /usr/sbin/amavisd-new (master)
               ├─2273 /usr/sbin/amavisd-new (virgin child)
               └─2274 /usr/sbin/amavisd-new (virgin child)
    
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .lrz
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .lz4
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .rar
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .rpm
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .swf
    Feb 28 14:13:32 mail amavis[2057]: No decoder for       .zoo
    Feb 28 14:13:32 mail amavis[2057]: Using primary internal av scanner code for ClamAV-clamd
    Feb 28 14:13:32 mail amavis[2057]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
    Feb 28 14:13:32 mail amavis[749]: amavisd-new.
    Feb 28 14:13:32 mail systemd[1]: Started LSB: Starts amavisd-new mailfilter.
    I have only monit and munin as monitoring software, but not configured amavis in monit



    is there anything thats can cause this problem?

    Code:
    service --status-all
     [ - ]  acpid
     [ + ]  amavis
     [ + ]  amavisd-snmp-subagent
     [ + ]  amavis-mc
     [ - ]  apparmor
     [ + ]  atd
     [ + ]  bind9
     [ + ]  clamav-daemon
     [ + ]  clamav-freshclam
     [ - ]  console-setup.sh
     [ + ]  cron
     [ - ]  cryptdisks
     [ - ]  cryptdisks-early
     [ + ]  dbus
     [ + ]  dovecot
     [ + ]  ebtables
     [ + ]  elasticsearch
     [ + ]  fail2ban
     [ - ]  fcgiwrap
     [ + ]  grub-common
     [ + ]  haveged
     [ + ]  hhvm
     [ - ]  hwclock.sh
     [ + ]  incron
     [ + ]  irqbalance
     [ + ]  iscsid
     [ ? ]  jailkit
     [ - ]  keyboard-setup.sh
     [ + ]  kmod
     [ - ]  le_ispc_pem.sh
     [ - ]  lvm2
     [ + ]  lvm2-lvmetad
     [ + ]  lvm2-lvmpolld
     [ + ]  lxcfs
     [ - ]  lxd
     [ - ]  mdadm
     [ - ]  mdadm-waitidle
     [ + ]  memcached
     [ ? ]  metronome
     [ + ]  monit
     [ - ]  munin
     [ + ]  munin-node
     [ + ]  mysql
     [ + ]  networking
     [ + ]  nginx
     [ - ]  ntp
     [ + ]  openbsd-inetd
     [ - ]  open-iscsi
     [ - ]  open-vm-tools
     [ + ]  php5.6-fpm
     [ + ]  php7.0-fpm
     [ + ]  php7.1-fpm
     [ + ]  php7.2-fpm
     [ + ]  php7.3-fpm
     [ - ]  plymouth
     [ - ]  plymouth-log
     [ + ]  postfix
     [ + ]  postgrey
     [ + ]  procps
     [ + ]  pure-ftpd-mysql
     [ + ]  qemu-guest-agent
     [ - ]  quota
     [ - ]  quotarpc
     [ + ]  redis-server
     [ + ]  rspamd
     [ - ]  rsync
     [ + ]  rsyslog
     [ - ]  screen-cleanup
     [ - ]  scsitools-pre.sh
     [ - ]  scsitools.sh
     [ - ]  spamassassin
     [ + ]  ssh
     [ + ]  udev
     [ + ]  ufw
     [ + ]  unattended-upgrades
     [ - ]  uuidd
     [ - ]  x11-common
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    Is the rescue system in ispconfig off (System > server config > Rescue)?
     
  18. ktownmods

    ktownmods Member HowtoForge Supporter

    Screenshot_792.png

    i removed and purged monit and munin now

    then run

    Code:
    service amavisd-new stop
    systemctl disable amavisd-new
    but after reboot amavis gets started
     
  19. Croydon

    Croydon ISPConfig Developer ISPConfig Developer

    Check
    Code:
    find /etc/rc* -name "*amavis*"
     
  20. ktownmods

    ktownmods Member HowtoForge Supporter

    Code:
    find /etc/rc* -name "*amavis*"
    /etc/rc0.d/K01amavis-mc
    /etc/rc0.d/K01amavis
    /etc/rc0.d/K01amavisd-snmp-subagent
    /etc/rc1.d/K01amavis-mc
    /etc/rc1.d/K01amavis
    /etc/rc1.d/K01amavisd-snmp-subagent
    /etc/rc2.d/S01amavis-mc
    /etc/rc2.d/S01amavis
    /etc/rc2.d/S01amavisd-snmp-subagent
    /etc/rc3.d/S01amavis-mc
    /etc/rc3.d/S01amavis
    /etc/rc3.d/S01amavisd-snmp-subagent
    /etc/rc4.d/S01amavis-mc
    /etc/rc4.d/S01amavis
    /etc/rc4.d/S01amavisd-snmp-subagent
    /etc/rc5.d/S01amavis-mc
    /etc/rc5.d/S01amavis
    /etc/rc5.d/S01amavisd-snmp-subagent
    /etc/rc6.d/K01amavis-mc
    /etc/rc6.d/K01amavis
    /etc/rc6.d/K01amavisd-snmp-subagent
     

Share This Page