Proxmox DKIM
- Thread starter EagleEye
- Start date
See also https://bugzilla.proxmox.com/show_bug.cgi?id=1654
But you can configure it manually already.
But you can configure it manually already.
One year has passed since the feature request was opened. Is there any progress? 
You can try out the manually version read my post on the tutorialOne year has passed since the feature request was opened. Is there any progress?
Thanks but I cannot use any solutions that require manual interaction. This way we have to touch every system we setup.
I suggest you sign on the Email Server, most are doing this.
If you want to sign on the gateway, you have to configure DKIM via CLI, see https://wiki.debian.org/opendkim
it works but keep in mind that you need to put a cron task to restart every minute the pmg-smtp-filter for some odd reason after implementing dkim after few hours it stops.
Sorry but this is only yours as a problem.
Technicaly speaking pmg-smtp-filter is a content filter and opendkim is a milter which should work together by design. I suggest to analyze in deep your issue,maybe with the help of proxmox support. I've both pmg-smtp-filter and a lot of milters running on the same box without any interference each other.
whats odd is that i have 6 vm of proxmox mail filter after i added the opendkim this happened
I still don't understand, why PMG is not supporting DKIM. Isn't relaying a mail through PMG changing header data, won't that break DKIM? Or the SpamAssassin checking and sometimes "rebuilding" the mail content? It looks more safe to have all the security stuff on one point. Same as I would be happy to have archiving and mail signing/encrypting (PGP and/or S/MIME) also (minimum as modules) on PMG.
I just setup PMG as a mail gateway for my Zimbra install which uses multiple backend servers for each domain, each handling their own DKIM signing, etc. and have had no issues sending DKIM signed emails out through PMG, or receiving them from outside sources.
All tests I've done have come back with a perfect score.
The best thing I love about PMG is how simple it is to setup. It's great at being a simple SPAM and Virus filter, reducing load off my backend servers, and I'm happy the team has kept it to just that.
I just setup PMG as a mail gateway for my Zimbra install which uses multiple backend servers for each domain, each handling their own DKIM signing, etc. and have had no issues sending DKIM signed emails out through PMG, or receiving them from outside sources.
All tests I've done have come back with a perfect score.
The best thing I love about PMG is how simple it is to setup. It's great at being a simple SPAM and Virus filter, reducing load off my backend servers, and I'm happy the team has kept it to just that.
For sure, everyone has an own view on topics, however, a Mail Gateway from my point of view is the best position to perform such topics. Also for my company we use different systems behind (Plesk, Exchange, Zammad) would be fine, if I could add DKIM just at one place and with only one system without the requirement to relay anything additional between to add DKIM (if we would like to).
I just setup PMG as a mail gateway for my Zimbra install which uses multiple backend servers for each domain, each handling their own DKIM signing, etc. and have had no issues sending DKIM signed emails out through PMG, or receiving them from outside sources.
All tests I've done have come back with a perfect score.
The best thing I love about PMG is how simple it is to setup. It's great at being a simple SPAM and Virus filter, reducing load off my backend servers, and I'm happy the team has kept it to just that.
quick question when you say that your zimbra does the dkim how do you pass though PMG? dont you have to relay it?
Yes, they are all relaying through PMG. The only thing I've noticed having an issue with are mails coming from PMG itself, like bounce-backs, that aren't signed with the mta's domain dkim. But I'm not overly concerned with those. I wonder if there's a way to pass system emails to Zimbra and have them relay back out through PMG, signed with the mta's domain dkim... hmm.