[SOLVED] DKIM doesn't Sign emails from external hosts

raghugs · 10-05-2009, 07:17 AM

Hello Everybody

I have recently configured DKIM in CentOS 5.3.
Using DKIM-milter for Sendmail to Sign and transfer e-mails.

DKIM correctly Signs mails that originate from the mail server.
But refuses to Sign mails that are sent from one of our Remote Server.
The remote server uses this mail server to relay mails.

I have added the remote server's IP in /etc/mail/dkim/trusted-hosts.
Configured /etc/mail/dkim/trusted-hosts as Internal Hosts list in /etc/dkim-milter.conf

I have provided below the DKIM errors i received in /var/log/maillog.

Code:

Oct  5 17:05:05 mailer dkim-filter[3761]: n95BZ1bf003801 no MTA name match
Oct  5 17:05:05 mailer dkim-filter[3761]: n95BZ1bf003801 external host [RemoteServerIP] attempted to send as mailer.mydomain.com
Oct  5 17:05:05 mailer dkim-filter[3761]: n95BZ1bf003801 not internal
Oct  5 17:05:05 mailer dkim-filter[3761]: n95BZ1bf003801 not authenticated
Oct  5 17:05:05 mailer dkim-filter[3761]: n95BZ1bf003801 mode select: verifying
Oct  5 17:05:06 mailer sendmail[3801]: n95BZ1bf003801: Milter insert (1): header: Authentication-Results: mailer.mydomain.com; dkim=none (no signature)\n\theader.i=unknown; x-dkim-adsp=fail

dkim-filter.conf contents can be found here http://pastebin.ca/1597498

raghugs · 10-08-2009, 12:23 AM

Bump :
Can anybody shed some light?

raghugs · 10-08-2009, 08:35 AM

Hello Everybody

Just to let you know that i have resolved the Issue by enabling both InternalHost and ExternalIgnoreHost and pointing them to /etc/mail/dkim/trusted-host via /etc/dkim-milter.conf