Page 3 of 3 FirstFirst 123
Results 21 to 29 of 29

Thread: DKIM Signature Do Not Validate When Using SMTP To Send Mail

  1. #21
    houarnet-tech is offline New Member
    Join Date
    Nov 2012
    Posts
    4
    Rep Power
    2

    Default

    I come back to this post to say that quanah was right. the 8.0.2 upgrade solved the problem for me. I pass the dkim control when i send a mail from my thunderbird on linux.
    Thanks a lot quanah for your support, i wish you the best for this new year.

  2. #22
    Y3K-Daniel is offline Junior Member
    Join Date
    Aug 2008
    Posts
    9
    Rep Power
    7

    Default

    Quote Originally Posted by houarnet-tech View Post
    I come back to this post to say that quanah was right. the 8.0.2 upgrade solved the problem for me. I pass the dkim control when i send a mail from my thunderbird on linux.
    Thanks a lot quanah for your support, i wish you the best for this new year.
    Good to hear, I also upgraded to 8.0.2, however I hit the IPv6 problem as found in the bug tracker, therefore mail isnt being signed at the moment. I will post back here when theres a patch for IPv6 support, but I am assuming this issue will be fixed as per houarnet-tech's post.

  3. #23
    bloom is offline Intermediate Member
    Join Date
    Nov 2012
    Location
    Poland
    Posts
    16
    Rep Power
    2

    Default

    Quote Originally Posted by houarnet-tech View Post
    I come back to this post to say that quanah was right. the 8.0.2 upgrade solved the problem for me. I pass the dkim control when i send a mail from my thunderbird on linux.
    Thanks a lot quanah for your support, i wish you the best for this new year.
    Hi, the same here. 8.0.2 is working properly also for me (although I had problems with mails from Thunderbird on Windows).

    I would like to say THANK YOU to all ZCS developers.

  4. #24
    Y3K-Daniel is offline Junior Member
    Join Date
    Aug 2008
    Posts
    9
    Rep Power
    7

    Default

    I am still having the IPv6 issue Bug 79377 – IPv6 issues with amavis/opendkim/milter/postfix since 8.0.2
    Is this supposed to be fixed yet?

    I am running OS 8.0.3 GA in Ubuntu 12.10

  5. #25
    Y3K-Daniel is offline Junior Member
    Join Date
    Aug 2008
    Posts
    9
    Rep Power
    7

    Default

    Ok so I am at 8.0.3, but still having issues with milter/dkim...

    I assume this is the cause:
    May 8 02:00:07 mx1 postfix/dkimmilter/smtpd[13377]: NOQUEUE: reject: CONNECT from ip6-localhost[::1]: 554 5.7.1 <ip6-localhost[::1]>: Client host rejected: Access denied; proto=SMTP

    I have no idea how to fix it, and it seems to have been that way since bug 79337 was fixed (never noticed it was somewhat different until now since the end result is the same as that bug, mail going into deferred).

    Any ideas?

  6. #26
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,276
    Rep Power
    10

    Default

    It looks like ::1 is not in "mynetworks" for postfix, so it is rejecting it. The rules are:

    -o smtpd_recipient_restrictions=permit_mynetworks,rej ect
    -o smtpd_client_restrictions=permit_mynetworks,reject

    i.e., it allows anything in mynetworks, rejects anything else.

    What is the output of

    zimbra@zre-ldap002:~$ postconf mynetworks


    I have:

    mynetworks = 127.0.0.0/8 10.137.242.0/24 [::1]/128 [fc00:10:137:242::]/64 [fe80::]/64

    (or as you can see, localhost for both ipv4 and ipv6)

    This comes from the server entry:

    zimbra@zre-ldap002:~$ zmprov gs zre-ldap002.eng.vmware.com zimbramtamynetworks
    # name zre-ldap002.eng.vmware.com
    zimbraMtaMyNetworks: 127.0.0.0/8 10.137.242.0/24 [::1]/128 [fc00:10:137:242::]/64 [fe80::]/64
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  7. #27
    Y3K-Daniel is offline Junior Member
    Join Date
    Aug 2008
    Posts
    9
    Rep Power
    7

    Default

    Hi Quanah,

    I got the email and was busy replying to that, sorry for the duplication (sticking to forum now).

    It appears I only have IPv4 entries in my config, is there a correct way to add the IPv6 ones or can I just add them to zimbramtamynetworks?

    zimbra@mx1:/root$ postconf mynetworks
    mynetworks = 127.0.0.0/8 46.105.122.0/24

    Regards,
    Daniel

  8. #28
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,276
    Rep Power
    10

    Default

    Hi Daniel,

    Just use zmprov to modify the values in zimbramtamynetworks. For your case specifically, you want the [::1]/128 and [fe80::]/64 bits added to your existing value. I'm not sure what your IPv6 host range is based off of your ipv4 46.105.122.0/24 range, but that doesn't matter for this.

    Something along the lines of

    zmprov ms mx1.yourdomain.com zimbraMtaMyNetworks '127.0.0.0/8 46.105.122.0/24 [::1]/128 [fe80::]/64'

    Should do it.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  9. #29
    Y3K-Daniel is offline Junior Member
    Join Date
    Aug 2008
    Posts
    9
    Rep Power
    7

    Default

    Well I don't get Access denied anymore, but now i get:

    May 8 03:30:05 mx1 postfix/dkimmilter/smtpd[16605]: warning: connect to Milter service inet:localhost:8465: Connection refused

    EDIT: This was fixed by making changes to /etc/hosts, adding 'localhost' to the entry for ::1.
    Quote Originally Posted by Quanah
    ...I think the problem you are having now is that your ipv6 localhost is not named "localhost" but "ip6-localhost". Try fixing that in /etc/hosts.
    Thank You Quanah for your prompt help on these issues!

    Relating it to the actual topic: I now have DKIM signed email that validates and does not get held up by IPv6 related issues, so all is working as it should.
    Last edited by Y3K-Daniel; 05-07-2013 at 08:12 PM.

Page 3 of 3 FirstFirst 123

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. DKIM Signature
    By ashrocks in forum Administrators
    Replies: 3
    Last Post: 12-03-2010, 02:03 PM
  2. DKIM Signature
    By ashrocks in forum Users
    Replies: 0
    Last Post: 12-03-2010, 11:51 AM
  3. Replies: 8
    Last Post: 02-19-2010, 08:55 AM
  4. Replies: 3
    Last Post: 01-10-2009, 11:02 PM
  5. Send mail via ISP SMTP
    By mcevoys in forum Administrators
    Replies: 12
    Last Post: 05-09-2006, 08:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •