RE: DKIM setup in Winterfell

There is an in-built way in amavis to do dkim signing in amavis. Submitting docs is however laborious so I have not done that. Heres the hard part:

### Add listener on 10028 for DKIM signing and define amavis policy for said listener

$inet_socket_port = [10024,10028];

$interface_policy{'10028'} = 'DKIM';

### Define DKIM key and signing maps ### YOU NEED TO GENERATE THE KEY FOR Kolab TO WORK ###

dkim_key('supersik.net', 'dkim', '/var/lib/amavis/db/example.org.pem', h=>'sha256', k=>'rsa');

@dkim_signature_options_bysender_maps = ( {

"supersik.net" => { d => "example.org", a => 'rsa-sha256', ttl => 10*24*3600 },

});

### Disable "Received:" insert to prevent breaking DKIM in header cleanup ### ENABLE THESE IF YOU NEED TO DEBUG AMAVIS IN THE PATH ###

$insert_received_line = 0;

$allowed_added_header_fields{lc('Received')} = 0;

### Start DKIM policy-bank sub-configuration

$policy_bank{'DKIM'} = {

### Enable 'DKIM signing in addition to extra default checks by amavis inside policy bank to prevent double-signing and feed mail back to postfix

enable_dkim_signing => 1,

forward_method => 'smtp:[127.0.0.1]:10029',

### Dont add a second virus scan header

X_HEADER_LINE => "",

};

Postfix config:

# Send mail second time to amavis for DKIM

smtp-amavis-dkim unix - - n - 3 smtp

-o smtp_data_done_timeout=1800

-o disable_dns_lookups=yes

-o smtp_send_xforward_command=yes

-o max_use=20

-o smtp_bind_address=127.0.0.1

# Listener to re-inject email from DKIM signing

127.0.0.1:10029 inet n - n - 100 smtpd

-o cleanup_service_name=cleanup_internal

-o content_filter=

-o local_recipient_maps=

-o relay_recipient_maps=

-o smtpd_restriction_classes=

-o smtpd_client_restrictions=

-o smtpd_helo_restrictions=

-o smtpd_sender_restrictions=

-o smtpd_recipient_restrictions=permit_mynetworks,reject

-o mynetworks=127.0.0.0/8

-o smtpd_authorized_xforward_hosts=127.0.0.0/8

I _think_ that’s all config. Might have dismissed something but...

-Zapotah

From: Milan Petrovic
Sent: Saturday, 19 October 2019 11.51
To: [email protected]
Subject: Re: DKIM setup in Winterfell

_______________________________________________
users mailing list
[email protected]
https://lists.kolab.org/mailman/listinfo/users