[SOLVED] Problem with milters

[guyh2]

Using FOSS 7.0.0 on Ubuntu 8.04 64bit

Installed dkim-filter edited its .conf and setup keys ok
listening on 127.0.0.1:8891 - can telnet in ok

Using CLI changed milterbind port to 8891
Using the Admin UI checked milter server and set address to 127.0.0.1

edited main.cf to add
non_smtpd_milters = inet:localhost:8891
milter_protocol = 2
milter_default_action = accept

smtpd_milters = inet:localhost:8891 was already set ok

non_smtpd_milters = inet:localhost:8891 does not stay following zmtactl restart - but persists after postfix reload as expected - (would be nice to sort this as well but secondary problem)

The problem - nothing is signed no emails either sent via client (on 587) or webmail submission even seem to be 'miltered' nothing in the logs or headers.

I'm obviously doing something very silly and very obvious somewhere grrrrr....

Someone give me a hint please !!!

(I had exactly the same issues with 6.0.10 as well)

[guyh2]

more info - non_smtpd_milters = inet:localhost:8891 does NOT stick after a postfix reload

I can edit main.cf manually or do a postconf -e non_smtpd_milters=inet:127.0.0.1:8891 and a postfix reload wipes it again

This may be the issue as the non-smtpd milters is the one I need for signing I think.

I have looked in ~/conf/zmmta.cf and non_smtpd_milters is set to VAR zimbraMtaNonSmtpdMilters
But I do not know where VAR zimbraMtaNonSmtpdMilters is set ???? ldap I presume ...

-EDIT-

I have now edited the ~/conf/zmmta.cf to set non_smtpd_milters manually and that setting 'sticks' now but still no emails going through the milter!!!
Nothing in the logs
(I also tried to set default_action to tempfail just to see if that would hold emails in teh queue if it was the milter failing but again no difference)

HELP!!! please .....

[guyh2]

Found this in the logs - just need to find out why

2011-03-01 11:43:49,307 ERROR [main] [] milter - Unable to start milter server: system failure: Could not bind to port=8891 bindaddr= ssl=false useChannels=true

[guyh2]

Originally Posted by guyh2

Found this in the logs - just need to find out why

2011-03-01 11:43:49,307 ERROR [main] [] milter - Unable to start milter server: system failure: Could not bind to port=8891 bindaddr= ssl=false useChannels=true

I think I am doing something fundamentally wrong here

Zimbra's milter server - this seems to be new in 7.0.0
It is trying to bind to localhost:8891 but of course it can't, because DKIM-filter has already bound to that port and is listening on it.

What does Zimbra's milter server do exactly? and should I be trying to use it or not?

[guyh2]

I have tried disabling the zimbra milter and manually editing ~/conf/zmmta.cf to rewite main.cf correctly

Still doesn't sign anything


I have also just set up another Ubuntu server just running Postfix and installed dkim-filter and it works first time

Delivered-To: root@ubuntu.####.co.uk
Received: by ubuntu.####.co.uk (Postfix, from userid 0)
        id C5F025A3FA; Tue,  1 Mar 2011 12:53:36 +0000 (GMT)
X-DKIM: Sendmail DKIM Filter v2.5.4 ubuntu.####.co.uk C5F025A3FA
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=####.co.uk;
        s=default; t=1298984016; bh=LLvw4B16nb24DWJSY244vAZQ9ghnxcfTxA5YWIB
        QrEc=; h=Subject:To:Message-Id:Date:From; b=HuQ4DPpBrc2ISR5qNm4Jg8D
        L/MO1d9ter39Zxg2kyUqT90N1v2qbCQ7XIwMQhl71DuDXS7bKbzMB7UdbOaaFpiQxDa
        z1B79fFjSC1mbHi5CVyqyQfGpv3nuQi92lkOOePT6OF5Wa57oBjbt4Nkc95kQSYJdrX
        Lv8hSEhWVylEZs=
Subject: test
To: <root@ubuntu.####.co.uk>
X-Mailer: mail (GNU Mailutils 1.1)

This is getting rather frustrating now

[guyh2]

Ok, hands up - it was a very simple error

My set up was using multiple domains set up as per Set Up DKIM For Multiple Domains On Postfix With dkim-milter 2.8.x (CentOS 5.3) | HowtoForge - Linux Howtos and Tutorials

However in the keylist file I had included and extra . in the domain name for the sender glob so the milter was doing its job and not finding a matching domain to sign from

The lack of any diagnostic logging was very frustrating though.

Still, it works

Still don't know what the Zimbra milter server is for though??

[phoenix]

Originally Posted by guyh2

Still don't know what the Zimbra milter server is for though??

It's mentioned in the Release Notes and these bugs relate to it's function:

Bug 9620 – policy for who can send to a distribution lists
Bug 46311 – milter to check if sender can send to a distribution list