Thursday, August 12, 2021

Re: smtpd only Mail Server

> Am 10.08.21 13:29 schrieb latincom@vcn.bc.ca:

>> >> > If you want help with a mail config,
>> >> > you need to show your mail config.
>> >> >
>> >>
>> >> No problem:
>> >> I am used to use only the base system.
>> >>
>> >> #       $OpenBSD: smtpd.conf,v 1.14 2019/11/26 20:14:38 gilles
>> >> Exp $
>> >>
>> >> # This is the smtpd server system-wide configuration file.
>> >> # See smtpd.conf(5) for more information.
>> >>
>> >> table aliases file:/etc/mail/aliases
>> >>
>> >> listen on socket
>> >>
>> >> # To accept external mail, replace with: listen on all
>> >> #
>> >> listen on all filter "dkimsign"
>> >>
>> >> action "local_mail" mbox alias <aliases>
>> >> action "outbound" relay
>> >>
>> >> # Uncomment the following to accept external mail for domain
>> >> "example.org"
>> >> #
>> >> # match from any for domain "example.org" action "local_mail"
>> >> match from any for domain "agroena.org" action "local_mail"
>> >> match from local for local action "local_mail"
>> >> match from local for any action "outbound"
>> >>
>> >> # dkim
>> >> filter "dkimsign" proc-exec "filter-dkimsign -d agroena.org -s s1 -k
>> >> /etc/mail/dkim/private.key" user _dkimsign group _dkimsign
>> >>
>> >>
>> > So assuming that you actually installed opensmtpd-filter-dkimsign and
>> > everything starts okay, you haven't put the public key in the DNS like
>> > you claimed in your original e-mail.
>> > $ dig +short txt s1._domainkey.agroena.org
>> > $
>> >
>>
>> I am not sure if it is a problem, but the selector is: mail.
>>
>> $ dig +short txt mail._domainkey.agroena.org
>> "k=rsa; t=s; h=sha256;
>> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOGOPbZVPidt2KCGqb38+OOD/cIZZnkpMY67oUPAfjVzP7vjJnxeTUOYtuQPTYv3whE6dwRSDwdw96DELKTjbaJ8DMEDFxbeqZxFl4EivuxuIwRSJVZQ36ed+TnfrPxLQowcno3kIh9je3t2VQ7GfD4WJfPD2GzfVljcTmJP3gNQIDAQAB"
>>
>>
> First you should match the selectors name.
> Either by telling the filter to use the key in selector "mail"
> or by changing the selectors name in DNS to "s1"
> Then you can debug further (e.g. your public key in DNS should match
> /etc/mail/dkim/private.key)
>

Thanks to take the time to respond Michael Hekeler, i am going to test it.

No comments:

Post a Comment