· 9 years ago · May 04, 2017, 02:12 AM
1
2Here are the postfix details:
3---------------------------------
4#:>postconf -n
5alias_database = hash:/etc/postfix/aliases
6alias_maps = hash:/etc/postfix/aliases
7broken_sasl_auth_clients = yes
8command_directory = /usr/sbin
9config_directory = /etc/postfix
10daemon_directory = /usr/libexec/postfix
11data_directory = /var/lib/postfix
12debug_peer_level = 2
13debug_peer_list = gmail.com
14header_checks = regexp:/etc/postfix/header_checks
15html_directory = /usr/share/doc/postfix-2.5.6-documentation/html
16inet_interfaces = all
17mail_owner = postfix
18mailq_path = /usr/bin/mailq.postfix
19manpage_directory = /usr/share/man
20mydestination = localhost
21myhostname = sub.domain.tld
22mynetworks = xx.xx.xx.xx
23newaliases_path = /usr/bin/newaliases.postfix
24non_smtpd_milters = unix:/var/run/dk-milter/dk.sock
25queue_directory = /var/spool/postfix
26readme_directory = /usr/share/doc/postfix-2.5.6-documentation/readme
27sample_directory = /etc/postfix
28sendmail_path = /usr/sbin/sendmail.postfix
29setgid_group = postdrop
30smtpd_milters = unix:/var/run/dk-milter/dk.sock
31smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated check_policy_service unix:private/vpm-pfpolicy reject_unauth_destination
32smtpd_sasl_auth_enable = yes
33unknown_local_recipient_reject_code = 550
34virtual_mailbox_domains = pgsql:/etc/postfix/vpm-domains
35virtual_transport = vpm-pftransport
36
37 -------------------------------
38Here is the dk-milter details:
39
40#:>cat /etc/sysconfig/dk-milter
41# Default values
42#
43USER="dk-milt"
44PORT="local:/var/run/dk-milter/dk.sock"
45SIGNING_DOMAIN="domain.tld"
46SELECTOR_NAME="dk1"
47KEYFILE="/etc/mail/domainkeys/dk_${SIGNING_DOMAIN}.pem"
48SIGNER=yes
49VERIFIER=yes
50CANON=simple
51REJECTION="bad=r,dns=t,int=t,no=a,miss=r"
52EXTRA_ARGS="-h -l -D"
53MILTER_GROUP="mail"
54
55# User configuration
56#
57#PORT0="inet:10034@localhost"
58#SIGNER0=no
59#PORT1="inet:10035@localhost"
60#VERIFIER1=no
61#...
62---------------------------------
63
64So I'm having issues with the Domain Keys signing messages.
65I've used dk-milter-1.0.2-0.i386.rpm & followed the installation doc properly. Also my DNS settings & records are perfect.
66Now, my problem is that when I send mails using webmail from the local user configured through vPostmaster then the mails are getting signed BUT the issue is that when the mails sent from different machines using their applicaitons then the messages are delivered but Not signed. [ I've already added their IP addreses here: mynetworks = xx.xx.xx.xx in main.cf]
67What am i Missing?
68Is this a postfix issue or a Domain Keys issue ?
69
70---------------------------------
71Here are the Gmail headers:
72
73## Mails Signed:
74Received-SPF: pass (google.com: domain of xx@xxx.com designates xx.xx.xx.xx as permitted sender) client-ip=xx.xx.xx.xx;
75DomainKey-Status: good (test mode)
76Authentication-Results: mx.google.com; spf=pass (google.com: domain of xx@xxx.com designates xx.xx.xx.xx as permitted sender) smtp.mail=xx@xxx.com; domainkeys=pass (test mode) header.From=xx@xxx.com
77Message-ID: <04e5e968f1477701780046adc9a54e67.squirrel@xx.xx.xx.xx>
78X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 xx.xxx.com 884C2160C78
79DomainKey-Signature: a=rsa-sha1; s=dk1; d=xxx..com; c=simple; q=dns;
80b=a2VI2luMgivi7pYjjXiLD+Wmm9MYNKvfYdS8x3TiFekVNUowGQz/TiJfvmI0Q43TI
818nnedknImUkrONAsijbqw==
82
83
84## Mails NOT signed:
85Received-SPF: pass (google.com: domain of xx@xxx.com designates xx.xx.xx.xx as permitted sender) client-ip=xx.xx.xx.xx;Authentication-Results: mx.google.com; spf=pass (google.com: domain of xx@xxx.com designates xx.xx.xx.xx as permitted sender) smtp.mail=xx@xxx.com
86Message-ID: <265003-2200973221109811@mailrelay90.com>
87X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 sub.domain.tld C89AC160C7E
88
89---------------------------------