Messages not signed with DKIM if smarthost is used

[japh]

Hi all.

FP here, so be gentle if this was already addressed, but since I cannot find anything about it I believe it wasn't.

When configuring a smarthost as explained in https://help.directadmin.com/item.php?id=153 the DKIM mechanism stop signing the messages.

Is there any workaround for this ?

Regards,

 

[factor]

Hello and welcome to DA and the Forum... Most of us are gentle...

Now I don't use 3rd party relay or smart host. I believe you need to get all of that dkim, spf and such from them and put their info in your domains DNS. Since DA is not sending the email it's just passing it off.

SMTP Relay for Third Party Sender DMARC Compliance - dmarcian

How can you eventually move to a p=reject policy when third parties are unable to send email properly on your behalf? In many cases, a DMARC compliant SMTP relay server can be used to do the trick. In this article, we’ll explore some of the facets of sending DMARC compliant... Read more »

dmarcian.com

I found the above that sort of explains it.

 

[japh]

Hello and welcome to DA and the Forum... Most of us are gentle...

Now I don't use 3rd party relay or smart host. I believe you need to get all of that dkim, spf and such from them and put their info in your domains DNS. Since DA is not sending the email it's just passing it off.

SMTP Relay for Third Party Sender DMARC Compliance - dmarcian

How can you eventually move to a p=reject policy when third parties are unable to send email properly on your behalf? In many cases, a DMARC compliant SMTP relay server can be used to do the trick. In this article, we’ll explore some of the facets of sending DMARC compliant... Read more »

dmarcian.com

I found the above that sort of explains it.

Actually ... no: that would defeat the whole concept of a control panel: you must be able to get everything nicely packaged together : the message, the DKIM signature which includes the private part that must reside on the server that signs the message and the public part that goes into the DNS zone, all of which is user controlled ... and then feed the messages through a smarthost ( your own or 3rd party ) to filter out spam, for instance.
Managing DKIM keys externally to the control panel would be a true nightmare.

This is just a matter of where the smarthost config is located within the Exim processing logic.

 

[smtalk]

When configuring a smarthost as explained in https://help.directadmin.com/item.php?id=153 the DKIM mechanism stop signing the messages.

Are you sure you've configured it as shown in that URL? Because last line of http://files1.directadmin.com/services/SpamBlocker/smart_route/exim.transports.pre.conf has the DKIM include there.

 

[factor]

smarthost config is located within Exim

Exim 4.71 does not add DKIM signature to outgoing emails

I am trying to add DKIM to my domain, I have created a key, added the following to /etc/exim4/conf.d/transport/30_exim4_config_remote_smtp: dkim_domain = mydomain.com dkim_selector = mail1

serverfault.com

Exim4 & DKIM

Where possible I try to get mail systems setup so that they can be verified as true senders by the recipient by using SPF and DKIM. Seems a shame that few mail systems actually seem to do this as i…

warlord0blog.wordpress.com

these may help

 

[japh]

Are you sure you've configured it as shown in that URL? Because last line of http://files1.directadmin.com/services/SpamBlocker/smart_route/exim.transports.pre.conf has the DKIM include there.

Yes, pretty much

 

[japh]

And I'm gonna contradict myself: the file "exim.transports.pre.conf" missed the ".include_if_exists /etc/exim.dkim.conf" line, which I believe was removed during the customization.

My bad ! Let's see if this fixes it

Thanks smtalk !