email has no dkim signature

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
User avatar
oetiker
Outstanding Member
Outstanding Member
Posts: 275
Joined: Fri Mar 07, 2014 1:05 pm
Location: Switzerland
ZCS/ZD Version: Release 10.0.6.GA.4518.UBUNTU20_64
Contact:

email has no dkim signature

Post by oetiker »

Hi

I think I have done all necessary config to use dkim, bud the emails have no dkim headers .... is there a way to find out
why zimbra does not signing the emails...

I have used this wiki article:
https://wiki.zimbra.com/wiki/Configurin ... IM_Signing

do I have to configure milter or policyd some how... any input is welcome... is there a log with dkim entries ?

thanks Manuel
User avatar
oetiker
Outstanding Member
Outstanding Member
Posts: 275
Joined: Fri Mar 07, 2014 1:05 pm
Location: Switzerland
ZCS/ZD Version: Release 10.0.6.GA.4518.UBUNTU20_64
Contact:

Re: email has no dkim signature

Post by oetiker »

Hi

Found my problem, I had configured a external MTA in this configuration zimbra does not add DKIM signatures because
this would be done by the MTA
User avatar
jaimec
Posts: 2
Joined: Fri Feb 25, 2022 8:44 pm

Re: email has no dkim signature

Post by jaimec »

I have the same problem. In my case zimbra if I send an email from webmail signature DKIM is not sent, but if I use thunderbird DKIM signature is included in header mail.

Any orientation is welcome.
User avatar
jholder
Ambassador
Ambassador
Posts: 4824
Joined: Fri Sep 12, 2014 10:00 pm

Re: email has no dkim signature

Post by jholder »

I know this is annoying, but if you don't have DKIM signatures in the header, then you've missed a step.
I don't have an easy way to tell you the step you're missing, but what I can say is that we have a lot of customers who run it without issue. I only mention this because I have not heard of any known issues with them being absent.

Your /var/log/zimbra.log will trace the message through amavis and postfix.

Postfix is the SMTP server, and amavis is sort of the "plugin platform" that postfix uses.
OpenDKIM connects to amavis.

Outbound:
MailboxServer -> Postfix
-> amavis -> clamav
-> amavis -> spamassassin
-> amavis -> OpenDKIm
-> amavis -> postfix -> Destination

So look at /var/log/zimbra.log
If I had a guess, I would bet that either OpenDKIM isn't enabled, or it's not running right.
User avatar
jaimec
Posts: 2
Joined: Fri Feb 25, 2022 8:44 pm

Re: email has no dkim signature

Post by jaimec »

Thanks for your comment. Let me explain:

I understand tha dkim is enabled
$ zmprov gs myhostname.domain.com | grep zimbraServiceEnabled
zimbraServiceEnabled: amavis
zimbraServiceEnabled: antivirus
zimbraServiceEnabled: antispam
zimbraServiceEnabled: opendkim
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: mta
zimbraServiceEnabled: logger
zimbraServiceEnabled: stats
zimbraServiceEnabled: ldap
zimbraServiceEnabled: zimbra
zimbraServiceEnabled: zimbraAdmin
zimbraServiceEnabled: service
zimbraServiceEnabled: zimlet

If I send an email vía webGUI the header don't attach the DKIM signature, but if I send via thunderbird yes.

The follow image shows an email sent via webGUI:
SinDKIM.png
SinDKIM.png (39.33 KiB) Viewed 1427 times

The follow image shows an email sent via thunderbird:
ConDKIM.png
ConDKIM.png (37.19 KiB) Viewed 1427 times
Why if zimbra sends an email via webGUI don't include the DKIM Signature and if send via mail client like thunderbird, yes?
Thanks in advance for any orientation about it.
Post Reply