Du hast es ja bereits in dem anderen Topic gefunden aber machen wir einfach hier weiter.
Also bei mir scheint das sauber zu funktionieren.
grom-test-2:~ # rspamadm configwizard
____ _
| _ \ ___ _ __ __ _ _ __ ___ __| |
| |_) |/ __|| '_ \ / _` || '_ ` _ \ / _` |
| _ < \__ \| |_) || (_| || | | | | || (_| |
|_| \_\|___/| .__/ \__,_||_| |_| |_| \__,_|
|_|
Welcome to the configuration tool
We use /etc/grommunio-antispam/rspamd.conf configuration file, writing results to /etc/grommunio-antispam
Modules enabled: dkim, greylist, dmarc, dkim_signing, history_redis, metadata_exporter, regexp, replies, multimap, maillist, bayes_expiry, force_actions, settings, chartable, emails, forged_recipients, spf, once_received, fuzzy_check, rbl, trie, whitelist, mid, milter_headers, mime_types, hfilter, arc, phishing, asn, ratelimit, neural
Modules disabled (explicitly): external_relay, aws_s3, dcc, mx_check, http_headers, bimi, rspamd_update, p0f, spamtrap
Modules disabled (unconfigured): url_redirector, fuzzy_collect, clickhouse, reputation, metric_exporter, maps_stats, dynamic_conf, clustering, ip_score, antivirus, external_services, spamassassin, elastic
Modules disabled (no Redis):
Modules disabled (experimental):
Modules disabled (failed):
Do you wish to continue?[Y/n]:
Setup WebUI and controller worker:
Do you want to setup dkim signing feature?[y/N]: y
How would you like to set up DKIM signing?
1. Use domain from mime from header for sign
2. Use domain from SMTP envelope from for sign
3. Use domain from authenticated user for sign
4. Sign all mail from specific networks
Enter your choice (1, 2, 3, 4) [default: 1]: 1
Do you want to sign mail from authenticated users? [Y/n]:
Allow data mismatch, e.g. if mime from domain is not equal to authenticated user domain? [Y/n]:
Do you want to use effective domain (e.g. example.com instead of foo.example.com)? [Y/n]:
Enter output directory for the keys [default: /var/lib/grommunio-antispam/dkim/]:
Enter domain to sign: moep.com
Enter selector [default: dkim]:
Do you want to create privkey /var/lib/grommunio-antispam/dkim/moep.com.dkim.key[Y/n]:
To make dkim signing working, you need to place the following record in your DNS zone:
dkim._domainkey IN TXT ( "v=DKIM1; k=rsa; "
"p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCZRCgeX39DDOi3SOtBs9lZ5y/l7mBxKjr745WmCZJS/D8ndHv0LHI61vqu2NS3tkdqzlrfA00n8KKkRZsIzAlD/XyOJYBqavUwtTtQOv5TX7kFo4uONxIAL16jHrXkdYlFrKzcFw9CWXkFc+x55orviXnx8B1VHHuTRHTeB4T0wQIDAQAB" ) ;
Do you wish to add another DKIM domain?[y/N]:
File: /etc/grommunio-antispam/local.d/dkim_signing.conf, changes list:
sign_authenticated => true
use_esld => true
domain => {[moep.com] = {[path] = /var/lib/grommunio-antispam/dkim/moep.com.dkim.key, [selector] = dkim}}
allow_hdrfrom_mismatch => true
use_domain => header
allow_username_mismatch => true
allow_hdrfrom_mismatch_sign_networks => true
Apply changes?[Y/n]:
Create file /etc/grommunio-antispam/local.d/dkim_signing.conf
1 changes applied, the wizard is finished now
*** Please reload the Rspamd configuration ***
Die Domain war nur als Beispiel und funktioniert da nicht aber sieht soweit gut aus.
Den Dienst danach neu starten systemctl restart grommunio-antispam und die DNS-Einträge beim Provider/BIND/whatever setzen.
Und wenn nicht, LOGS! 🖥️
