Proxmox DKIM

Discussion in 'Mail Gateway: Installation and configuration' started by EagleEye, Feb 3, 2018.

  1. DerDanilo

    DerDanilo Member
    Proxmox Subscriber

    Joined:
    Jan 21, 2017
    Messages:
    259
    Likes Received:
    24
    @dietmar What is the current status of this feature? I am onboarding some new customers to PMG weekly. (Should think about reselling). :-D
    This feature is missed almost to everybody.
     
  2. tom

    tom Proxmox Staff Member
    Staff Member

    Joined:
    Aug 29, 2006
    Messages:
    13,557
    Likes Received:
    408
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    DerDanilo likes this.
  3. DerDanilo

    DerDanilo Member
    Proxmox Subscriber

    Joined:
    Jan 21, 2017
    Messages:
    259
    Likes Received:
    24
    Thanks @tom !
    I know how to configure it. Makes it just a little harder to sell customers the awesome, easy and simple to maintain Mail Gateway solution. :)
     
  4. PizzaTime

    PizzaTime New Member

    Joined:
    Apr 3, 2018
    Messages:
    10
    Likes Received:
    1
    Hello Tom,

    This feature would be great. :)
    Do you know a release date?
     
    DerDanilo likes this.
  5. SkenKonBez

    SkenKonBez New Member

    Joined:
    Oct 2, 2018
    Messages:
    8
    Likes Received:
    2
  6. DerDanilo

    DerDanilo Member
    Proxmox Subscriber

    Joined:
    Jan 21, 2017
    Messages:
    259
    Likes Received:
    24
    One year has passed since the feature request was opened. Is there any progress? :)
     
    siucdude and SkenKonBez like this.
  7. killmasta93

    killmasta93 Member

    Joined:
    Aug 13, 2017
    Messages:
    436
    Likes Received:
    16
    You can try out the manually version read my post on the tutorial
     
  8. DerDanilo

    DerDanilo Member
    Proxmox Subscriber

    Joined:
    Jan 21, 2017
    Messages:
    259
    Likes Received:
    24
    Thanks but I cannot use any solutions that require manual interaction. This way we have to touch every system we setup.
     
  9. Heiko Siewert

    Heiko Siewert New Member

    Joined:
    Oct 1, 2018
    Messages:
    9
    Likes Received:
    0
    What is the current status of DKIM Signed outgoing mails ?
     
  10. tom

    tom Proxmox Staff Member
    Staff Member

    Joined:
    Aug 29, 2006
    Messages:
    13,557
    Likes Received:
    408
    I suggest you sign on the Email Server, most are doing this.

    If you want to sign on the gateway, you have to configure DKIM via CLI, see https://wiki.debian.org/opendkim
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. killmasta93

    killmasta93 Member

    Joined:
    Aug 13, 2017
    Messages:
    436
    Likes Received:
    16
    it works but keep in mind that you need to put a cron task to restart every minute the pmg-smtp-filter for some odd reason after implementing dkim after few hours it stops.
     
  12. tom

    tom Proxmox Staff Member
    Staff Member

    Joined:
    Aug 29, 2006
    Messages:
    13,557
    Likes Received:
    408
    I do not see this behavior here.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. Davide Bozzelli

    Joined:
    Feb 6, 2018
    Messages:
    76
    Likes Received:
    5
    Sorry but this is only yours as a problem.
    Technicaly speaking pmg-smtp-filter is a content filter and opendkim is a milter which should work together by design. I suggest to analyze in deep your issue,maybe with the help of proxmox support. I've both pmg-smtp-filter and a lot of milters running on the same box without any interference each other.
     
  14. Miktash

    Miktash Member

    Joined:
    Mar 6, 2015
    Messages:
    44
    Likes Received:
    1
    Can't we just configure proxmox mail gateway to relay all email to another mta that does dkim signing?
    That way you don't need to manually adjust postfix config files and it would probably be easier to upgrade?
     
  15. killmasta93

    killmasta93 Member

    Joined:
    Aug 13, 2017
    Messages:
    436
    Likes Received:
    16
    whats odd is that i have 6 vm of proxmox mail filter after i added the opendkim this happened
     
  16. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    614
    Likes Received:
    154
    I still don't understand, why PMG is not supporting DKIM. Isn't relaying a mail through PMG changing header data, won't that break DKIM? Or the SpamAssassin checking and sometimes "rebuilding" the mail content? It looks more safe to have all the security stuff on one point. Same as I would be happy to have archiving and mail signing/encrypting (PGP and/or S/MIME) also (minimum as modules) on PMG.
     
    DerDanilo, killmasta93 and sb-jw like this.
  17. Jonathan Tyler

    Jonathan Tyler New Member

    Joined:
    May 15, 2019
    Messages:
    4
    Likes Received:
    2
    I just setup PMG as a mail gateway for my Zimbra install which uses multiple backend servers for each domain, each handling their own DKIM signing, etc. and have had no issues sending DKIM signed emails out through PMG, or receiving them from outside sources.

    All tests I've done have come back with a perfect score.

    The best thing I love about PMG is how simple it is to setup. It's great at being a simple SPAM and Virus filter, reducing load off my backend servers, and I'm happy the team has kept it to just that. :)
     
    killmasta93 likes this.
  18. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    614
    Likes Received:
    154
    For sure, everyone has an own view on topics, however, a Mail Gateway from my point of view is the best position to perform such topics. Also for my company we use different systems behind (Plesk, Exchange, Zammad) would be fine, if I could add DKIM just at one place and with only one system without the requirement to relay anything additional between to add DKIM (if we would like to).
     
  19. killmasta93

    killmasta93 Member

    Joined:
    Aug 13, 2017
    Messages:
    436
    Likes Received:
    16
    quick question when you say that your zimbra does the dkim how do you pass though PMG? dont you have to relay it?
     
    Jonathan Tyler likes this.
  20. Jonathan Tyler

    Jonathan Tyler New Member

    Joined:
    May 15, 2019
    Messages:
    4
    Likes Received:
    2
    Yes, they are all relaying through PMG. The only thing I've noticed having an issue with are mails coming from PMG itself, like bounce-backs, that aren't signed with the mta's domain dkim. But I'm not overly concerned with those. I wonder if there's a way to pass system emails to Zimbra and have them relay back out through PMG, signed with the mta's domain dkim... hmm.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice