Mail server DKIM not signed (but ive set it up already)

aaP_enricoroselino

So, ive set up my email, all green pass and set DKIM on my DNS with default._domainkey

ive setup my reverse DNS too

DKIM not pass

is there any extra setup in dovecot / postfix ? and is there any different because in hes***cp the DKIM selector is "mail" (mail._domainkey) ?

aaPanel_Kern

aaP_enricoroselino
Unable to send dkim headers
Troubleshoot log /var/log/rspamd/rspamd.log
Prompt for permission issues:
2022-04-20 00:27:56 #1363(rspamd_proxy) <6795e9>; proxy; dkim_module_load_key_format: cannot load dkim key /www/server/dkim/xx.com/default.private: cannot map key file: '/www /server/dkim/xx.com/default.private' Permission denied

Set 640 to 644, then restart rspamd to send emails to view the email source code, please replace xxx.com with your domain name.

chmod 644 /www/server/dkim/xx.com/default.private systemctl restart rspamd

aaP_enricoroselino

aaPanel_Kern
Thank u !

aaP_marvin26camarillo

Your solution works.

Set 640 to 644, then restart rspamd to send emails to view the email source code, please replace xxx.com with your domain name.

chmod 644 /www/server/dkim/xx.com/default.private
systemctl restart rspamd

idflorin

Or run in terminal
find /www/server/dkim -type f -exec chmod 644 {} + -o -type d -exec chmod 755 {} +
and
systemctl restart rspamd

Chaosnature

Tried all but still have issues

plus i get error 21 on ssl even after re-issuing the cert

aaPanel_Kern

Hello, it is recommended that you directly save the certificate once. Is it normal?
What version of operating system are you using? What version is the mail server? What is the version of aapanel?

Chaosnature

xcode_ae

good day @aaPanel_Kern ,
i have followed the comment that you mention :
chmod 644 /www/server/dkim/xx.com/default.private
systemctl restart rspamd
and after i check it on tester mail

what you suggest me to do ?

aaPanel version : 7.0.19
System: Debian GNU/Linux 12 x86_64(Py3.12.3)

aaPanel_Kern

Hello,
Have you modified it to your domain name? Check whether the email sends DKIM information?

xcode_ae

aaPanel_Kern yes i did that instate xx.com i replace it to my mail domain services and main domain name too and it's still same any suggest please ,
as Chatgtp result :
❌ No DKIM Found
Your email does not include a DKIM-Signature header, which means DKIM is not being used to sign outgoing messages from your server.
after i did some research i found out something called "OpenDKIM" do i need to install it ?

also find something i have to add to file /etc/rspamd/local.d/dkim_signing.conf like :

Enable DKIM signing globally

enabled = true;
sign_authenticated = true;
sign_local = true;
use_domain = "header";
selector = "default";

aaPanel_Kern

Hello,
This file will be automatically configured when adding a mailbox domain

xcode_ae

aaPanel_Kern great i did not change it i kept the same but the DIKM is till not sending or there is something wrong with it
is there anything i have to check for ?

xcode_ae

xcode_ae it's solved by remove the domain name with mail web and added them again

aaPanel_Kern

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

xcode_ae

aaPanel_Kern good morning,
it's working thank you very much, but i want to ask you something related to PTR it can be used for multi domain or i have to add more IPs for that and each ip connect to one domain ?

aaPanel_Kern

Hello,
If you only have one IP, it is recommended that all domain MX records use the same A record: such as mail.you_domain_name.com and then use this A record for PTR

xcode_ae