opendkim | latest open source DKIM filter software from The OpenDKIM

by cyrusimap C Version: Current License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | opendkim Summary

opendkim is a C library. opendkim has no bugs, it has no vulnerabilities and it has low support. However opendkim has a Non-SPDX License. You can download it from GitHub.

this directory has the latest open source dkim filter software from the opendkim project. there is a web site at that is home for the latest updates. -------------- | introduction | --------------. the trusted domain project is a community effort to develop and maintain an open source library for producing dkim-aware applications, and a "milter"-based filter for providing dkim service. the dkim sender authentication system was originally created by the e-mail signing technology group (estg) and is now a draft standard of the ietf (rfc6376). dkim is an amalgamation of the domainkeys (dk) proposal by yahoo!, inc. and the internet identified mail (iim) proposal by cisco. "milter" is a portmanteau of "mail filter" and refers to a protocol and api for communicating mail traffic information between mtas and mail filtering plug-in applications. it was originally invented at sendmail, inc. but has also been adapted to other

Support

Quality

Security

License

Reuse

Support

opendkim has a low active ecosystem.

It has 6 star(s) with 3 fork(s). There are 3 watchers for this library.

It had no major release in the last 6 months.

There are 2 open issues and 0 have been closed. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of opendkim is current.

Quality

opendkim has no bugs reported.

Security

opendkim has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

opendkim has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

opendkim releases are not available. You will need to build from source code and install.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of opendkim

Get all kandi verified functions for this library.

opendkim Key Features

No Key Features are available at this moment for opendkim.

opendkim Examples and Code Snippets

No Code Snippets are available at this moment for opendkim.

Community Discussions

Trending Discussions on opendkim

New users' emails go to gmail spam while older users' don't

SPF Record for Multiple DKIMs (including MX)

MailKit gets an SslHandshakeException with LetsEncrypt SSL certificates

DKIM key not valid - Bad RSA signature

Opendkim error "key retrieval failed" when long dkim keys are used

How to use sed to replace string that contains slash?

Convert PKCS#1-formatted private key to PKCS#8-formatted private key by java

Django + Postfix + Gmail + openDKIM -avamis > dkim = neutral (body hash did not verify)

DKIM TrustedHosts file issue

How to use opendkim socket in 2 postfix instances?

QUESTION

New users' emails go to gmail spam while older users' don't

Asked 2021-Feb-09 at 14:55

A few months ago I set up an email server on my vultr cloudserver. I use postfix, dovecot and OpenDKIM. To test it I set up a new user and it worked fine, never got into spam. Actually I set up a sendmail script for root to send a mail to my gmail address every time someone logs into ssh. It still works fine, never goes to spam.

A few days ago however, I set up a few new users on my server to make new email accounts.

...

ANSWER

Answered 2021-Feb-09 at 14:55

I've found a solution to my question:

Somehow all newly created users of my mailserver had this "shadowbanned" status, so I had to manually report every one of my spammed emails as "not spam" on the receiving side. This solved the problem for these users, and I can send them to any gmail address without being marked as spam.

It looks like gmail automatically blacklisted my mail users regardless the headers, the lack of public blacklisting, or the content of the mails.

Source https://stackoverflow.com/questions/66061567

QUESTION

SPF Record for Multiple DKIMs (including MX)

Asked 2020-May-28 at 22:04

I know very little about mail server administration. I'm piecing together user guides. I've bought a domain name, and [paid] Protonmail which allows using a custom domain. I've had this working for a while, but now I'm having trouble extending it for another DKIM record.

Objectives:

Send and receive email using Protonmail from the custom domain
Send-only email from a Postfix server I'm running

In order to send/receive email using Protonmail through my domain name, I've set up the following TXT records:

...

ANSWER

Answered 2020-May-28 at 22:04

Ok, let's start debugging this anyways ... (quite frankly, this is not a programming question so superuser would have been the better choice there, but I like that you wanna host your own mail :) )

Your SPF record should look like the following. Your own domain is not needed, cause the SPF record is saved in it's DNS records. Otherwise, that would (but won't) build a loop.

Source https://stackoverflow.com/questions/61968628

QUESTION

MailKit gets an SslHandshakeException with LetsEncrypt SSL certificates

Asked 2020-May-22 at 23:26

I have a server (Centos 7) setup to be used as mail server. Using postfix/dovecot/opendkim/opendmarc.. It works as it should, users are able to connect their emails using gmail for example. Able to send and receive mail.

Also when I use MailKit and test my .NET Core application from my home pc MailKit connects fine and the emails are send.

However, when I deploy the application to my server MailKit fails to connect.

If I look in the logs I see the following

...

ANSWER

Answered 2020-May-22 at 23:25

The unable to get certificate CRL error sounds like SslStream was unable to get the CRL, perhaps because the CRL server is unreachable for some reason.

You could try adding emailClient.CheckCertificateRevocation = false; before the ConnectAsync to check if that's the issue.

The other error, unable to get local issuer certificate, might be because the server that MailKit is running on doesn't have the Root CA certificate in its X509Store but your home PC does.

Update:

The problem is that LetsEncrypt SSL certificates do not include a CRL location which means that certificate revocation checks will fail.

To bypass this, you need to set client.CheckCertificateRevocation = false; before connecting.

Source https://stackoverflow.com/questions/61894037

QUESTION

DKIM key not valid - Bad RSA signature

Asked 2020-Feb-19 at 13:00

I have setup DKIM on a Ubuntu 14.04 machine using opendkim and postfix. I generated the RSA keypair and updated the TXT record.

When testing the settings at any DKIM tester like www.mail-tester.com or www.dkimvalidator.com, I get errors like "result = fail, bad RSA signature".

Here is an example mail (info from dkimvalidator.com). I substituted the real domain with mail.example.com.

...

ANSWER

Answered 2017-Sep-20 at 07:34

Problem was because opendkim did not listen on the specified socket; Postfix was not able to reach opendkim and the email therefore not signed.

Source https://stackoverflow.com/questions/46286587

QUESTION

Opendkim error "key retrieval failed" when long dkim keys are used

Asked 2019-Jul-24 at 19:06

I'm using postfix with opendkim and see a lot of the following errors:

...

ANSWER

Answered 2019-Feb-26 at 20:15

This issue seems to be due to the fact, that opendkim does not set the pseudo resource record OPT UDPSize, indicating that it can handle responses longer than 512 bytes, as defined by EDNS (wiki), RFC 2671.

Opendkim (no EDNS)

As can be seen in this tcpdump of an opendkim request:

Source https://stackoverflow.com/questions/54609917

QUESTION

How to use sed to replace string that contains slash?

Asked 2018-Oct-24 at 03:45

I wanto replace # SigningTable refile:/etc/opendkim/SigningTable to SigningTable refile:/etc/opendkim/SigningTable. Which means just remove #.
I use sed -i 's/# SigningTable refile:/etc/opendkim/SigningTable/ SigningTable refile:/etc/opendkim/SigningTable/g' /etc/opendkim.conf,but doesn't work.
I think it's because /,how to use sed to replace string with /?

...

ANSWER

Answered 2018-Oct-24 at 03:45

You can change the delimiter:

Source https://stackoverflow.com/questions/52960629

QUESTION

Convert PKCS#1-formatted private key to PKCS#8-formatted private key by java

Asked 2018-May-09 at 10:15

I have a PKCS#1-formatted private key (generated by opendkim-genkey) like this

...

ANSWER

Answered 2018-May-09 at 10:15

Disclaimer: I did not come up with this solution myself, it was written by marcoscottwright over at github. Find the original code here

You can do so using BouncyCastle given you have a PrivateKey k object.

Source https://stackoverflow.com/questions/50250582

QUESTION

Django + Postfix + Gmail + openDKIM -avamis > dkim = neutral (body hash did not verify)

Asked 2018-Apr-24 at 09:52

I have followed this tutorial to configure DKIM and Postfix on Debian 7 wheezy. These instructions are pretty much a standard on the interwebz.

I am using Gmail to send and receive emails using my own domain. I followed this instructions to achieve that.

My problem

I can send and receive emails but I can't manage to pass the DKIM test (at least with Gmail). After searching and struggling for a while I have come to the conclusion that the reason of my woes is that my message is getting multiple DKIM signatures (see mail.log below). And this, according to the DKIM directives is enough for the DKIM to fail.

But after reading about on how to solve the multiple signatures problem I found that absolutely all of these solutions refer to having 'amavis' installed. Thing is...I don't have it installed!

In any case these solutions mention changing postfix configurations related to the milters in master.cnf and/or main.cfn. For example, adding this to the 'receive_override_options' (again, I don't have that variable since I don't have amavis installed) should solve the issue:

...

ANSWER

Answered 2018-Apr-24 at 09:52

I managed to fix this some time ago after several trails and errors. Problem is I don't remember what exactly I did to solve it. I was playing with several parameters -sometimes simultaneously- without keeping any track (my bad). However, at some point everything worked!

Here are my configuration files. Hope they can guide/help someone.

/etc/postfix/master.cf

Source https://stackoverflow.com/questions/45886766

QUESTION

DKIM TrustedHosts file issue

Asked 2018-Apr-19 at 08:35

Can anyone tell me why this works.

...

ANSWER

Answered 2018-Apr-19 at 08:35

Make sure your file that looks like this:

Source https://stackoverflow.com/questions/46854794

QUESTION

How to use opendkim socket in 2 postfix instances?

Asked 2018-Mar-07 at 21:04

I have 2 postfix instaces running, and i want to sign emails with opendkim, but the issue is i am not able to use same socket in both instances, code is below

/etc/default/opendkim

...

ANSWER

Answered 2018-Mar-07 at 21:04

OpenDKIM will only use one UNIX socket. You can't specify multiple UNIX sockets as you have above.

Option 1

Create the socket file somewhere else e.g. SOCKET="local:/var/run/opendkim/opendkim.sock". Make sure both instances of Postfix have permissions to access this file, through membership of the opendkim group or otherwise.

Create an opendkim directory in the chroot jail for each instance of Postfix:

Source https://stackoverflow.com/questions/48913985

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install opendkim

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: