outgoing mail problem without dkim signature

[epa64]

hi, I am on version 1.1-stable mailserver. I haven't migrated yet because is in production since two years. I am some problem with smtp i losed the dkim signature on outgoing mail. I think is after i add the multimap. somebody can help me? best regard's

[AndrewSav]

Could you please provide steps to reproduce with as much details as possible.

[arnauvp]

Hey, it seems we are also experiencing this. We just realized… and we recently added a multimap too, for spam whitelist.

Need to confirm it, will report back when I know more.

[epa64]

Hi,

yes i add white domain list.

it's work fine.

Best regards

Le 26/11/2020 à 15:41, Arnau VP a écrit :

Hey, it seems we are also experiencing this. We just realized… and we recently added a multimap too, for spam whitelist.

Need to confirm it, will report back when I know more.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/mailserver2/mailserver/issues/28#issuecomment-734335083, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABGUQXCHXOFUTIT5PVJHSKTSRZSJ5ANCNFSM4TTXX3TA.

[AndrewSav]

@epa64 is your issue resolved?

[arnauvp]

I was able to reproduce the issue.

We recently added

# `config/mail/rspamd/multimap.conf`
SENDER_FROM_WHITELIST_USER {
  type = "from";
  filter = "email:addr";
  map = "/etc/rspamd/local.d/whitelist.sender.map";
  action = "accept"; # Prefilter mode
}

the map is a list:

one@example.com
two@example.com
three@example.com

It seems this disables DKIM signing for all users at example.com (not only on the map), even though on startup:

[INFO] Found DKIM key pair for domain example.com - skip creation
[INFO] DKIM/ARC signing is enabled

(Edited: we don't have the WHITELIST_SPAM_ADDRESSES in the end)

[arnauvp]

@AndrewSav do you think the above is a misconfiguration? Or is it a bug that DKIM signing is disabled once SENDER_FROM_WHITELIST_USER is defined as above?

[AndrewSav]

@arnauvp Do you think it's an rspamd bug / misconfiguration? There are probably rspamd documentation/support forums that could help? I googled a bit and some people in different config relation situations suggest running rspamadm configtest to make sure consistency of the configuration, can you try that?

Also, can you give more details how you reproduce it. Are you saying that after apply the config above any emails sent from the eaxample.com domain, when received do not have DKIM signature?

Also examples here and elsewhere show file:/// moniker in front of the path, not sure if it's important.

map = "file:///tmp/from.map";

[arnauvp]

OK so it seems we have figured it out. Once prefilter is configured, all normal prefilter flows are skipped, so for users in our whitelist the DKIM step was not done (and not all users as thought initially).

We have instead configured the map in ratelimit.conf as such:

whitelisted_user = "/etc/rspamd/local.d/whitelist.sender.map";

[arnauvp]

It seems I can't close the issue myself. @AndrewSav would you mind doing so?