• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Postfix email not signed

AdrianC

Basic Pleskian
My email is not signed with postfix mail server.
I checked the "sign outgoing email" on both server settings and domain > email settings.

main.cf has two lines related to "milters", it looks like this:

Code:
#grep milters /etc/postfix/main.cf
non_smtpd_milters =
smtpd_milters = , inet:127.0.0.1:12768

Does that look bad, what should I try ?

/etc/domainkeys is owned by root:root

/etc/domainkeys/mydomain.tld/default is owned by root : pop

Is that ok ?
domainkeys worked OK with qmail from what I recall, and looking at maillog the last mentioning of "domainkeys" in the log is since I had qmail installed.
 
Last edited:
I tried the steps in that KB, but about the steps ...

1) I checked/unchecked/checked the switches in mail settings and in domain > mail settings, they are on and doesn't work.

2) It says "if DKIM is installed", I don't know if is installed, it is not clear if that is a requirement. I do not have the file /etc/opendkim.conf

3) I ran that command, it didn't help and I didn't notice any interesting output from it. E.g problems.
Code:
#/usr/local/psa/admin/sbin/mchk

4) If I add the two lines on main.cf email is not delivered anymore, in maillog I see this ("Command Rejected"):

Code:
Aug  5 11:08:27 h2 postfix/cleanup[18714]: 4910543C0893: to=<[email protected]>, relay=none, delay=0.12, delays=0.12/0/0/0, dsn=5.7.1, status=bounced (Command rejected)
Aug  5 11:08:27 h2 postfix/cleanup[18709]: 5990843C0895: message-id=<[email protected]>
Aug  5 11:08:27 h2 postfix/bounce[18713]: 4910543C0893: sender non-delivery notification: 5990843C0895
Aug  5 11:08:27 h2 postfix/qmgr[18694]: 5990843C0895: from=<>, size=2230, nrcpt=1 (queue active)
Aug  5 11:08:27 h2 postfix-local[18905]: postfix-local: from=MAILER-DAEMON, [email protected], dirname=/var/qmail/mailnames
Aug  5 11:08:27 h2 postfix-local[18905]: Unable to get sender domain by sender mailname
Aug  5 11:08:27 h2 postfix-local[18905]: cannot chdir to mailname dir bounce+adriantnt=yahoo.com: No such file or directory
Aug  5 11:08:27 h2 postfix-local[18905]: Unknown user: [email protected]
Aug  5 11:08:27 h2 postfix/pipe[18715]: 5990843C0895: to=<[email protected]>, relay=plesk_virtual, delay=0.08, delays=0.03/0/0/0.04, dsn=2.0.0, status=sent

Anything else I can try ?
 
Also, I have two DNS records related to domain keys, is this an error ?


Code:
_domainkey.ffiles.com.    TXT    o=-

Code:
default._domainkey.ffiles.com.    TXT  

p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQ
DDh25MNqVIOgVdn5yN7lSLvhftoa7MCD9jIvgBC8
qi9T8ISth5egUB7l0GwJBGKrMpEZRXwnSbwtbQTe
h77OUoj61Mrx7Yx1U5i0N3bE80hx6RG5q0NbbxnN
tNhKph54bnoOBE9H7r3GXJ+P+C0irFiWxN2TubLk
LymCTpIF2sUwIDAQAB;[code]
 
Hi AdrianC,

first, please don't mix DKIM ( DomainKeys Identified Mai ) and OpenDKIM - they are very close friends, but they have different configurations.
DKIM is implemented in Plesk. If you would like to configure OpenDKIM as well, please try to use the forum search or use google - there are an enormous lot of tutorials all over the net. ( hint: use "Plesk" "DKIM" "configure" when you use Google. ^^ ).

If you switched the option "on" and "off", you might just want to switch from postfix to qmail ( and backwards to postfix again - - - or the other way round ), which solves a lot of time, investigating the issue, why dksign isn't handling the signature at the moment. Please make as well sure, that you updated/patched your Plesk version to the latest Microupdates available.

The two additionally DNS - entries are necessary and if you see these entries in your DNS - settings, it's mostly a good sign, that a service is just not running, or stuck while chatting to a nice girl/boy. :D ( Please try to restart psa and xinetd, as well as your mailsystem. If you still experience issues, please post your eMail configuration files for further investigations.
 
I ended up switching back to qmail because I cold not get postfix to sign the emails.
Whenever I tested some settings it stopped sending emails and I am sending many messages. I couldn't afford doing more tests.

Off topic: Is qmail still being maintained/updated? Because I started to like it's features while learning more about it.
 
Back
Top