Re: dkim-milter verify, but don't sign.

[Josef Karliak]

  In the message header I've :
X-DKIM: Sendmail DKIM Filter v2.7.2 kostnew.ajetaci.cz 8840B239C3
Authentication-Results: kostnew.ajetaci.cz; dkim=none (no signature)
 header.i=unknown; dkim-adsp=fail

 And in the mail log:


  I've a few similar dkim installations that works (but on older opensuses..).

  Maybe some small stupid misconfig, but where. It is all simple :-/


  thanks
  J.K.

Cituji Robert Schetterer <rob...@schetterer.org>:

Nov 7 10:48:37 kostnew dkim-filter[16623]: 8840B239C3 external host [192.168.2.5] attempted to send as ajetaci.cz

Am 07.11.2011 10:46, schrieb Robert Schetterer:

Am 07.11.2011 10:39, schrieb Josef Karliak:

  Good morning,
  I configured dkim-milter (2.7.2-x) to postfix (2.7.2-x) on opensuse
11.4 64-bit, generated keys (named "mail"). In the dkim-milter config I
defined my options:
DKIM_MODES="sv"
DKIM_DOMAIN="ajetaci.cz"
DKIM_SELECTOR="mail"
DKIM_CANON="simple"
DKIM_REJECTION="bad=a,dns=t,no=a,sec=t"
DKIM_EXTRA_ARGS="-l -h -D"
DKIM_SIGNALG="rsa-sha256"

and in the main.cf I've :
milter_protocol = 2
smtpd_milters = inet:localhost:8891
non_smtpd_milters = inet:localhost:8891
milter_default_action = accept

  I tried this over unix socket too.

  Where is an error ? Any kicks to the right way ? :-/
  Thanks and best regards
  J.K.

perhaps this helps

Mode (string)
              Selects operating modes.  The string is a concatenation of
characters which indicate which mode(s) of operation are desired.  Valid
modes are s  (signer)  and  v
              (verifier).  The default is sv except in test mode (see
the dkim-filter(8) man page) in which case the default is v.

so configure your

DKIM_MODES="sv" as you want it

ups sorry, guess that was not what you asked for

what exactly does not work
do you have any logs?


--
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria

--


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Ma domena pouziva zabezpeceni a kontrolu SPF (www.openspf.org) a DomainKeys/DKIM (with ADSP) . Pokud mate problemy s dorucenim emailu, zacnete pouzivat metody overeni puvody emailu zminene vyse. Dekuji. My domain use SPF (www.openspf.org) and DomainKeys/DKIM (with ADSP) policy and check. If you've problem with sending emails to me, start using email origin methods mentioned above. Thank you.

binzO2tcjszwx.bin
Description: Veřejný PGP klíč