Hi Daniel. hmm ok ill patch and rebuild qmail with simscan, and see how it goes.
Thanks for your help. Cheers Aron Palmer - Domains Administrator - Conetix Premier Web Solution Provider PO BOX 742 Ipswich Queensland Australia 4305 B 1300 789 260 1300 789 261 INT+(617) 345 46700 +(617) [EMAIL PROTECTED] http://www.conetix.com.au DISCLAIMER Communications through Conetix e-mail systems may be monitored to secure effective system operation and for other lawful purposes. This communication is to be treated as confidential and the content may not be used or disclosed except for the purpose for which it has been sent. No liability is accepted for damage caused in the transmission of this email.If you have reason to believe that you are not the intended recipient of this communication, please contact sender immediately. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Saturday, November 10, 2007 2:56 PM To: toaster@shupp.org Subject: RE: [toaster] domainkeys ??? Well, what you did seems confusing. For once the simscan bit was not supposed to be skipped... it seems that simscan is responsible for sending the message to the signer if i understood that correctly. But, then again, you tried many ways of setting this up. You should stick to only one way and try to set it up like that. >From the last phrases i understand that, at this moment, you have it all setup after Jeremy's how to. There is a problem with Jeremy's instructions. As it seems i followed them too and the problem is that no messages are signed unless they are sent from the 10.0.0.2 ip address according to these settings: 10.0.0.2:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/defaul t",QMAILQUEUE="/var/qmail/bin/qmail-dk" :allow,DKVERIFY="DEGIJKfh",QMAILQUEUE="/var/qmail/bin/qmail-dk" He recomends on using a patch to qmail if SMTP AUTH is used in order to have all authenticated user's messages signed. This patch i did not applied at the time i installed qmail and configured dk and i have the same "problem" as you, in my case only the localhost sent mail is signed (only messages sent using webmail). I'd recommend patching and rebuilding qmail and see if this fixes the problem, if the situation mentioned above is true. I think is easier to patch and rebuild one program than to patch and rebuild three of them. Give it a shot and give us some feedback of how it went. > Hi. > > Iv followed the instruction from here. > http://www.shupp.org/toaster/?page=all (Bill's Linux Qmail Toaster v. > 0.9.2) > > I DIDNT install any of these, as I dont need them > > # > > * courier-imap > * squirrel mail > * autorespond > * ezmlm-idx > * qmailadmin > * Spam Assassin > * ClamAV > * ripmime > * simscan > * TMDA > * QmailAdmin Limits > > after install everything works correctly. > > I then followed instructions from here > http://www.sangprabv.web.id/articles/article.php?aid=Mg== (Domainkeys > Setup > With Bill's Linux Qmail Toaster + Jurgen Kendzorra Patch) > > but didnt install the simscan bit as I dont have simscan > > Reconfigure simscan > #cd /var/src/simscan-1.3.1.shupp2/ > #./configure --enable-user=clamav --enable-clamav=y --enable-spam=y > --enable-spam-passthru=y --enable-per-domain=y --enable-ripmime > --enable-attach=y --enable-received=y > --enable-clamdscan=/usr/local/bin/clamscan > --enable-qmail-queue=/var/qmail/bin/qmail-dk > make and install your simscan > > so when it came to editing the the /home/vpopmail/etc/tcp.smtp I had this > > :allow,DKVERIFY="DEGIJKfh",QMAILQUEUE="/var/qmail/bin/qmail-dk", > AUTH_SET_DKSIGN="/var/qmail/control/domainkeys/%/default" > > replacing the % with my domain name > > To generate the key I followed this site. > http://jeremy.kister.net/howto/dk.html (qmail-1.03 & Netqmail-1.05 / > DomainKeys Integration Howto v20070607.01) > > > replacing the path "DKSIGN="/etc/domainkeys/example.com/default" with the > path /var/qmail/control/domainkeys/%/default. > > so in the end it looks like this *** with a proper IP of the server that > im > sending mail from, and the % replaced with a proper domaing that I > generated > the sigs for.. > > > 10.0.0.2:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/defaul > t",QMAILQUEUE="/var/qmail/bin/qmail-dk" > :allow,DKVERIFY="DEGIJKfh",QMAILQUEUE="/var/qmail/bin/qmail-dk" > > I added the "txt" record to the DNS server and tested it by going to the > test page, all records responded with "ok/valid" > > but it still won't sign the emails. > > iv even replaced the % with a domain that doesn't exist to see if I get an > error, but the email still goes through and still not signed. > > > I really appreciate any help. > > Cheers > > > > Aron Palmer - Domains Administrator - Conetix Premier Web Solution > Provider > PO BOX 742 Ipswich Queensland Australia 4305 > B 1300 789 260 1300 789 261 > INT+(617) 345 46700 +(617) 0732817439 [EMAIL PROTECTED] > http://www.conetix.com.au > > > DISCLAIMER > > Communications through Conetix e-mail systems may be monitored to secure > effective system operation and for other lawful purposes. This > communication > is to be treated as confidential and the content may not be used or > disclosed except for the purpose for which it has been sent. No liability > is > accepted for damage caused in the transmission of this email.If you have > reason to believe that you are not the intended recipient of this > communication, please contact sender immediately. > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Friday, November 09, 2007 3:10 AM > To: toaster@shupp.org > Subject: RE: [toaster] domainkeys ??? > > @ Sim > > Do not setup domainkeys, as long as the verifier and the signer binaries > are not called you do not have to worry about anything. > > @ Aron > > As long as you follow other instructions on setting up qmail and give no > details about what you've allready done to setup domainkeys we cannot help > you. > > Please give more details on what you have done to setup domainkeys. > >> Sorry to hijack your thread, im ripping my hair out trying to get this >> domain key signing to work. >> >> "> There are currently no instructions in the toaster on implementing >>> qmail-dk. Check out the man qmail-dk man page for implementation >>> information, it's all there." >> >> iv gone to the man page and followed the instruction there... rename >> qmail-queue to qmail-queue.orig and then set that in the tcp file, I >> also >> tried to get it to produce an error. The man say that if you leave the % >> sign out and dont have a folder then it should error, I did this and my >> email still went through. >> >> I really need some help to implement domains keys signing please, can >> anyone >> help. >> >> >> Cheers >> >> >> >> Aron Palmer - Domains Administrator - Conetix Premier Web Solution >> Provider >> PO BOX 742 Ipswich Queensland Australia 4305 >> B 1300 789 260 1300 789 261 >> INT+(617) 345 46700 +(617) 0732817439 [EMAIL PROTECTED] >> http://www.conetix.com.au >> >> >> DISCLAIMER >> >> Communications through Conetix e-mail systems may be monitored to secure >> effective system operation and for other lawful purposes. This >> communication >> is to be treated as confidential and the content may not be used or >> disclosed except for the purpose for which it has been sent. No >> liability >> is >> accepted for damage caused in the transmission of this email.If you have >> reason to believe that you are not the intended recipient of this >> communication, please contact sender immediately. >> >> -----Original Message----- >> From: Sim [mailto:[EMAIL PROTECTED] >> Sent: Monday, November 05, 2007 9:37 PM >> To: toaster@shupp.org >> Subject: Re: [toaster] domainkeys ??? >> >> Hi ! >> Can I remove libdomainkeys from your Patch? >> This is no important for me ! >> I'm trying to install new Qmail without this patch... >> Your last Toaster work very well.. without that patch. >> Thanks! >> Sim >> >> >> 2007/6/26, Bill Shupp <[EMAIL PROTECTED]>: >>> Michael D Schleif wrote: >>> > At the bottom of this page: >>> > >>> > <http://www.shupp.org/toaster/?page=qmail> >>> > >>> > there is the last section, headed thusly: >>> > >>> > "Now let's compile libdomainkeys, we'll need that later:" >>> > >>> > I do NOT see where this is later used. >>> > >>> > What am I missing? >>> > >>> >>> qmail-toaster-0.9.1.patch requires the libdomainkeys library. This >>> patch is applied to netqmail during vpopmail installation (libvpopmail >>> is also required by the patch). >>> >>> There are currently no instructions in the toaster on implementing >>> qmail-dk. Check out the man qmail-dk man page for implementation >>> information, it's all there. >>> >>> Regards, >>> >>> Bill >>> >>> >> >> No virus found in this incoming message. >> Checked by AVG Free Edition. >> Version: 7.5.503 / Virus Database: 269.15.21/1109 - Release Date: >> 11/4/2007 >> 11:05 AM >> >> >> No virus found in this outgoing message. >> Checked by AVG Free Edition. >> Version: 7.5.503 / Virus Database: 269.15.22/1111 - Release Date: >> 11/5/2007 >> 4:36 AM >> >> >> > > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1115 - Release Date: > 11/7/2007 > 9:21 AM > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.26/1119 - Release Date: > 11/8/2007 > 5:55 PM > > > No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.26/1120 - Release Date: 11/9/2007 9:26 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.29/1124 - Release Date: 11/11/2007 10:12 AM