[exim] [Exim-Users] Problem setting up exim 4.80.1 with Doma…

Top Page
Delete this message
Reply to this message
Author: Alexandru Vladulescu
Date:  
To: exim-users
Subject: [exim] [Exim-Users] Problem setting up exim 4.80.1 with Domain Keys signing

Dear all,


After days and hours of google-ing over the internet I could come up
with a solution to my problem (I have even checked you github FAQ),
therefore I am writing you all this email. I have setup up exim 4.80.1,
and I am having a very hard time trying to identify why email leaving my
server don't have the DomainKeys signature on the their headers.

I have to mention that I have DKIM working on my installation through,
and all emails going out are DKIM signed.

Now, I know that DomainKeys are deprecated and probably will be replaced
with DKIM, but still we have mail service providers like Yahoo, that
still decide to look-up over the Domain Keys for email headers
signature. The result is that my emails to them are getting marked as SPAM.



Below it's my configured settings for DKIM

remote_smtp:
         driver = smtp
         dkim_domain = domain.org
         dkim_selector = mail
         dkim_private_key = /etc/dkim/keys/domain.org/mail.private
         dkim_canon = simple
         dkim_strict = 1
         dkim_sign_headers = 
Content-Type:To:From:Subject:Sender:Reply-To:Cc:MIME-Version




I would like also to mention that I have been searching the web for an
dkim_sign_headers example and got just few self-explanatory cases that I
could match and show on how this setting should be setup in the first
place. Most of the topics covering this subject are just referring to
the dkim_sign_headers as a possible variable setup.

I need to mention also that I have tried recompiling exim many times,
even setting EXPERIMENTAL_DOMAINKEYS=yes (although I understood is
deprecated since 4.69) or WITH_DOMAINKEYS=yes but without a luck or
setting the daemon run in full debug mode. I had also reference to this
link, but with no joy: https://github.com/Exim/exim/wiki/DomainKeys

Paste from the page:

/The 4.69 release of Exim contained experimental support for DomainKeys.
In the 4.70 release, this was replaced with non-experimental DKIM
support. This documentation is left as a reference for those using
systems still based around 4.69./


I don't know if 4.80.1 is still called based around 4.69 :). Somebody
else on the internet mentioned that changing relaxed (which I had
initially configured on dkim_canon) to simple might do the trick, but
with no luck for me.


Testing out the service (at check-auth@???) after each
command/setting change still results me in:

/==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham/



I would like to request you kindly help on the current matter, as I am getting chump in considering how hard is to implement this in exim tho in comparison with postfix's opendkim.


Thank you all.

Regards,
Alex Vladulescu