about opendkim service

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
maslakyavuz1
Posts: 4
Joined: Fri Apr 19, 2019 1:28 pm

about opendkim service

Postby maslakyavuz1 » Thu Jul 04, 2019 9:55 am

i have a zimbra server foss edition on ubuntu. It has been running for about a couple of years.
i have got an error since last night in the mail.log;
postfix/dkimmilter/smtpd[17357]: warning: connect to Milter service inet:localhost:8465: Connection refused
postfix/dkimmilter/smtpd[17357]: NOQUEUE: milter-reject: CONNECT from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP
when i check zmcontrol status, i saw openkim and memcache stopped and other services ran.

if i restart the machine, this situation works for a while but then the problem occurs again.

what can be the problem ?


12313jimbo
Advanced member
Advanced member
Posts: 113
Joined: Fri Sep 12, 2014 10:01 pm

Re: about opendkim service

Postby 12313jimbo » Thu Jul 11, 2019 3:42 am

I've got the same issue that just started happening.

Any resolutions for this?
maslakyavuz1
Posts: 4
Joined: Fri Apr 19, 2019 1:28 pm

Re: about opendkim service

Postby maslakyavuz1 » Thu Jul 11, 2019 5:56 am

I changed milter_default_action accept instead of tempfail in the main.cf. But it is a makeshift action.
it must be more appropriate solution. I am waiting for a solution from the forum too.
phoenix
Ambassador
Ambassador
Posts: 26152
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: about opendkim service

Postby phoenix » Thu Jul 11, 2019 6:18 am

Take a look at this thread (you should alo search the forums before posting) and see if it applies to your server: https://forums.zimbra.org/viewtopic.php?f=15&t=66546
Regards

Bill

Rspamd: A high performance spamassassin replacement

If you'd like to see this implemented in a future version of ZCS then please vote on Bugzilla entries 97706 & 108168
12313jimbo
Advanced member
Advanced member
Posts: 113
Joined: Fri Sep 12, 2014 10:01 pm

Re: about opendkim service

Postby 12313jimbo » Thu Jul 11, 2019 3:04 pm

Thanks guys!

I was able to solve the issue following the recommendations in this thread:

Take a look at this thread (you should alo search the forums before posting) and see if it applies to your server: viewtopic.php?f=15&t=66546
rodrigoferra
Posts: 3
Joined: Thu Jul 11, 2019 11:11 am

Re: about opendkim service

Postby rodrigoferra » Thu Jul 11, 2019 3:49 pm

I was facing the exact same problem, solved with it: https://sebastian.marsching.com/blog/ar ... erver.html

Recently I stumbled across a bug in the OpenDKIM configuration of the Zimbra Collaboration Server.

In ZCS 8.0.3 (Community Edition, but I guess the same applies to the Network Edition), the file /opt/zimbra/conf/opendkim.conf.in specifies the socket that OpenDKIM listens on in the following way:

Socket %%zimbraInetMode%%:8465@[%%zimbraLocalBindAddress%%]

This results in the following socket address of "inet6:8465@[::1]" in the final file (opendkim.conf). However, the Postfix configuration file /opt/zimbra/postfix/conf/master.cf.in specifies the socket as "inet:localhost:8465". This leads to Postfix trying to connect to an IPv4 socket, while OpenDKIM is listening on an IPv6 socket, so that the connection cannot be established.

The fix is quite easy: By changing "%%zimbraInetMode%%:8465@[%%zimbraLocalBindAddress%%]" to "inet:8465@[127.0.0.1]" in opendkim.conf.in and restarting Zimbra, OpenDKIM can be made to listen on an IPv4 socket, so that Postfix can connect again.

The curious thing is, that this bug has already been reported half a year ago and has supposedly been fixed. However, it seems like this fix was only applied to the 9.0 branch of Zimbra and not to Zimbra 8.0.


Thanks to https://sebastian.marsching.com/blog/au ... -Marsching
maslakyavuz1
Posts: 4
Joined: Fri Apr 19, 2019 1:28 pm

Re: about opendkim service

Postby maslakyavuz1 » Sun Jul 14, 2019 12:59 pm

What's the result about the service named opendkim ?
i didn't any suspicious crontab file. Also i tried instructions at https://lorenzo.mile.si/zimbra-cve-2019 ... ction/961/ and regarding port 8465 in /opt/zimbra/conf/opendkim.conf.in

i did not able to start opendkim but rebooting the server.

Any advice?


12313jimbo wrote:Thanks guys!

I was able to solve the issue following the recommendations in this thread:

Take a look at this thread (you should alo search the forums before posting) and see if it applies to your server: viewtopic.php?f=15&t=66546

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 18 guests