Axel.Grunersuedfactoring.de
Date: Tue Oct 16 2007 - 06:41:19 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Byung-Hee HWANG <bhizb.knu.ac.kr> wrote on 16.10.2007 13:23:51:

> On Tue, 2007-10-16 at 13:05 +0200, Axel.Grunersuedfactoring.de wrote:
> >
> > Byung-Hee HWANG <bhizb.knu.ac.kr> wrote on 16.10.2007 12:52:22:
> >
> > > On Tue, 2007-10-16 at 12:27 +0200, Axel.Grunersuedfactoring.de
> > wrote:
> > > >
> > > > Hi,
> > > >
> > > > i am using Postfix 2.4.5,1, amavisd-new 2.5.2,1,
> > p5-mail-spamassassin
> > > > 3.2.3 and clamav 0.91.1 with FreeBSD 6.2-RELEASE
> > > > So, now i want to run , dkim_milter 2.3.0 also with this
> > > > configuration.
> > > >
> > > > Everything works fine with the old old configuration, so i am
> > trying
> > > > to implment dkim.
> > > > I installed dkim_milter from ports and changed main.conf:
> > > >
> > > > smtpd_milters =
> > > > inet:127.0.0.1:10029
> > > >
> > > > Also changed master.cf:
> > > >
> > > > 127.0.0.1:10025 inet n - n - - smtpd
> > > > -o content_filter=
> > > > -o local_recipient_maps=
> > > > # DKIM
> > > > -o receive_override_options=no_milters
> > > > [...]
> > > >
> > > > In /etc/rc.conf:
> > > >
> > > > milterdkim_enable="YES"
> > > > #milterdkim_uid='mailnull'
> > > > milterdkim_uid='dkimuser'
> > > > milterdkim_socket="inet:10029127.0.0.1"
> > > > milterdkim_cfgfile="/usr/local/etc/mail/dkim-filter.conf"
> > > > milterdkim_domain="example.de"
> > > > milterdkim_key="/usr/local/etc/mail/dkimsuedfac0701.private.key"
> > > > milterdkim_selector="dkimsuedfac0701"
> > > > milterdkim_flags="-b sv -c simple/simple"
> > > >
> > > > After that i was able to start dkim_milter with the startup
> > script.
> > > > Also is seems to work (if you take a look at the header, you,
> > > > hopefully, find the DKIM signature in it).
> > > >
> > > > Just is simple question: Is this the way to configure dkim_milter
> > to
> > > > sign outgoing mails and verify incoming mails? Or is something
> > > > missing? Well, for me it looks like it is working, just want to be
> > > > sure...
> > >
> > > For testing for DKIM, just send mail to Gmail (youridgmail.com).
> > > In my case, it is as follow: (See 'dkim=pass' string)
> > >
> > > Authentication-Results: [...] dkim=pass (test mode) [...]
> > >
> > > This is full header:
> > http://izb.knu.ac.kr/~bh/stuff/DKIM-TESTING-FINAL
> >
> > Yeah, i just wonder if my configuration (with amavisd-new and DKIM) is
> > correct, or if there is something i missed.
> > If i check the header at gmail, i see the following:
> > Received-SPF: pass (google.com: domain of Axel.Grunersuedfactoring.de
> > designates 212.202.224.251 as permitted sender)
> > client-ip=212.202.224.251;
> > Authentication-Results: mx.google.com; spf=pass (google.com: domain of
> > Axel.Grunersuedfactoring.de designates 212.202.224.251 as permitted
> > sender) smtp.mail=Axel.Grunersuedfactoring.de; dkim=pass
> > header.i=suedfactoring.de
> > Received: from localhost (localhost.suedfactoring.de [127.0.0.1])
> > by smtp2.suedfactoring.de (Postfix) with ESMTP id 004F57E858
> > for <axel.grunergmail.com>; Mon, 15 Oct 2007 08:56:55 +0200
> > (CEST)
> > X-Virus-Scanned: amavisd-new at suedfactoring.de
> > Received: from smtp2.suedfactoring.de ([127.0.0.1])
> > by localhost (sffwd0.suedfactoring.de [127.0.0.1])
> > (amavisd-new, port 10024)
> > [...]
>
> Your DKIM signature was verified as 'pass' by mx.google.com. Good!
> And then, you need a testing for verifying function of your milter.
>
> For that testing, just send mail to your domain configured with milter
> from Gmail (youridgmail.com). And check the mail header;;

Looks good. Mail from gmail gets verified (maillog told me so - in Lotus
Notes, the client i have to use here (bah), you can not really see the
header information).
Ok, i am just wondering why the configuration of DKIM was that easy.
Because if you take a look here:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim it looks
much more complicate...

Cheers,

Axel

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]