search

froxlor / Froxlor

The server administration software for your needs - The official Froxlor development Git repository
http://www.froxlor.org
GNU General Public License v2.0
1.63k stars 458 forks source link

DKIM with RSPAMD and without DNS #1093

Closed nched closed 2 months ago

nched commented 1 year ago

Is your feature request related to a problem? Please describe. There are several requests for a proper DKIM implementation. In nearly all cases it boils down to a combination of DKIM & DNS and since DNS is not used widely enough DKIM implementation is considered low priority.

Describe the solution you'd like DKIM signed mails are now more or less required by bigger e-mail providers like Google, Yahoo etc to pass their spam tests. I run several tests with different Google accounts and Mail-tester.com. While I scored a high score without DKIM at mail-tester.com - Google still put the mails in the spam folder. As soon as the mail was DKIM signed Google put it into the inbox.

I run Froxlor with web- and mail server but without DNS. DNS is managed external. I already have rspamd running. What I propose is the following:

  1. Let Froxlor produce a pair of keys for domains with DKIM setting ticked.
  2. Create the keys in a way that they are readable by rspamd -> the key files containing the domain name.
  3. Template for rspamd.
  4. Make the public key viewable through the Froxler interface.
  5. If DNS server is used and the DKIM setting per domain is ticked then write the DNS configuration.

Describe alternatives you've considered Point 5 is a different use case and optional. Point 4 would be nice to have - as well as point 3. Point 1 & 2 are essential.

Additional context Add any other context or screenshots about the feature request here.

d00p commented 1 year ago

I agree with you but:

And yes, we are already talking/planning about having dkim independent from DNS. Please understand that this still is a project done in spare time and that we try to prioritize as best as we can.

nched commented 1 year ago

agreed. And I highly appreciate what you guys are doing, especially you d00p! No time pressure. I can sponsor some beers. ;-)

Neustradamus commented 12 months ago

To follow this important ticket.

d00p commented 9 months ago

started implementation with b15f99b1e1625ac83512c5f44ad0a6514e630879 (future version 2.2)

d00p commented 2 months ago

It's implemented that way as antispam-feature in v2.2