email from legit domains that fail DKIM signature verification are not being delivered to my exchange server.

Forums

Add a reply View Replies (4) →

James Raaymakers

Offline

Issue

email from legit domains that fail DKIM signature verification are not being delivered to my exchange server.

Resolved

0 votes

Using ClearOS 7 as a mail gateway to ms exchange. I have been noticing in the maillog "amavis[29452]: (29452-03) dkim: not signing, empty signing domain, From:<domain.com>" domains like facebookmail.com, amazon.com, linkedin.com etc. Does anyone know a way to tweek this to warn or tag and deliver the email so I can quarantine the email on exchange instead of amavis dropping the message?

I believe they are being dropped because I was looking for a specific message in the maillog on my ClearOS and all the log had regarding the message was the three lines below. Nothing regarding final disposition, and that message was not delivered to exchange. Nothing in the Exchange tracking logs from this sender.

Feb 23 16:49:09 Heimdall amavis[8749]: (08749-18) dkim: VALID MailFrom signature by d=amazonses.com, From: <support@fithub.com>, a=rsa-sha256, c=relaxed/simple, s=224i4yxa5dv7c2xz3womw6peuasteono, i=@amazonses.com, ORIG [127.0.0.1]:56792
Feb 23 16:49:10 Heimdall amavis[8749]: (08749-18) dkim: candidate originators: From:<support@fithub.com>, mail_from:<01000161c548edbf-52c54e1c-e951-46a3-b34d-366f1af01a26-000000@amazonses.com>
Feb 23 16:49:10 Heimdall amavis[8749]: (08749-18) dkim: not signing, empty signing domain, From: <support@fithub.com>

Thanks in Advance.
James

In Mail Antispam

Saturday, February 24 2018, 07:25 PM

Share this post:

Responses (4)

Accepted Answer

James Raaymakers

Offline
Sunday, February 25 2018, 01:18 AM - #Permalink
Resolved

0 votes

I was tracking a certain email and those are the only three lines I found for the sending email address. But turns out that was the envelope sender, not the message sender who was amazones.com. So I search the message ID for the message and found what I was looking for. Thought it was being dropped by amavis since I only saw the three lines in the maillog. Issue resolved. I did not dig far enough before jumping to a conclusion.
The reply is currently minimized Show
Accepted Answer
Nick Howitt

Offline
Saturday, February 24 2018, 08:40 PM - #Permalink
Resolved

0 votes

If it is already 0 then amavisd is not doing DKIM verification. Have you changed anything to do with DKIM in ClearOS? I know I have a written a HowTo for DKIM signing but it does not use amavisd. I was not aware it could do it until your post!
The reply is currently minimized Show
Accepted Answer

James Raaymakers

Offline
Saturday, February 24 2018, 08:30 PM - #Permalink
Resolved

0 votes

I found it. It is. $enable_dkim_verification = 0;

Thanks.
The reply is currently minimized Show
Accepted Answer
Nick Howitt

Offline
Saturday, February 24 2018, 08:15 PM - #Permalink
Resolved

0 votes

Have you enabled DKIM verification yourself? I believe it is normally disabled in /etc/amavisd.conf:
$enable_dkim_verification = 0;

Your error message almost looks like it is you not DKIM signing the e-mails, but I would not have thought you wanted to do this.
The reply is currently minimized Show