[Rspamd-Users] Can't get DKIM signing to work

Tino Hendricks t.hendricks at interpool.de
Fri Feb 9 11:03:31 UTC 2024


Dear list!

Module is enabled:

rspamadm configdump -m
Modules enabled: rbl, ... dkim_signing, asn, ...

but this only reports

rspamadm configdump dkim_signing 
*** Section dkim_signing ***
sign_networks [
    "127.2.4.7",
]
Where does this IP address come from?

My /etc/rspamd/local.d/dkim_signing.conf:

sign_authenticated = true;
use_esld = true;
allow_username_mismatch = true;
use_domain = „header";
allow_hdrfrom_mismatch = false;
allow_hdrfrom_mismatch_sign_networks = true;
selector="dkim";

# If false, messages with empty envelope from are not signed
allow_envfrom_empty = true;

# If true, multiple from headers are allowed (but only first is used)
allow_hdrfrom_multiple = false;

# Default path to key, can include '$domain' and '$selector' variables
path = "/var/lib/rspamd/dkim/$domain.$selector.key";

# Symbol to add when message is signed
symbol = "DKIM_SIGNED";

# If `true` get pubkey from DNS record and check if it matches private key
check_pubkey = false;
# Set to `false` if you want to skip signing if public and private keys mismatch
allow_pubkey_mismatch = true;

Log:
2024-02-09 11:41:53 #330848(normal) <7121d7>; task; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
2024-02-09 11:41:53 #330848(normal) <7121d7>; lua; dmarc.lua:349: skip DMARC checks as either SPF or DKIM were not checked
2024-02-09 11:41:53 #330848(normal) <7121d7>; dkim_signing; lua_dkim_tools.lua:183: user is authenticated
2024-02-09 11:41:53 #330848(normal) <7121d7>; dkim_signing; lua_dkim_tools.lua:405: use domain(header) for signature: domain.tld
2024-02-09 11:41:53 #330848(normal) <7121d7>; dkim_signing; lua_dkim_tools.lua:425: final DKIM domain: domain.tld
2024-02-09 11:41:53 #330848(normal) <7121d7>; dkim_signing; lua_dkim_tools.lua:445: couldnt find domain in username

Why is it looking for the domain in username, despite: allow_username_mismatch = true;

What am I missing?

Thank you so much!

Tino



More information about the Users mailing list