On 04/21/14 14:07, Murray S. Kucherawy wrote:
> On Sat, 19 Apr 2014, Phil Stracchino wrote:
>>> I think I just figured out how to do this. It looks as though what I
>>> need to do is use ExternalIgnoreList.
>>
>> ...and no, that does not appear to be entirely working. I'm still
>> seeing this message:
>>
>> Apr 19 19:26:41 epsilon3 opendkim[12316]: 2EDFFA34B1: external host
>> babylon5.babcom.com attempted to send as caerllewys.net
>>
>> The DKIM-Signature does, however, appear to be being added now even
>> though I'm still getting the external host warning. When I send test
>> messages out and reflect back in, though, I'm getting an authentication
>> error because the key was not found, which is peculiar...
>
> "Key not found" is a DNS problem. Is your public key visible from the
> outside at the right location?
Thanks for responding, Murray.
It's supposed to be, yes, both internally and externally. The TXT
record is set in both the internal and external view of the domain. I
could tell there was a DNS issue, what's not clear to me is *why* there
is a DNS issue. Everything looks correct to me at the DNS level. Do
you have any advice for troubleshooting this specific problem? How
would you go about troubleshooting a failure of opendkim to retrieve the
key?
> ExternalIgnoreList, set correctly, should remove the warning you're
> getting. How did you set it?
As follows, in /etc/opendkim/opendkim.conf:
Syslog yes
SyslogSuccess yes
Canonicalization relaxed/simple
Domain caerllewys.net,epsilon3.caerllewys.net
ExternalIgnoreList babcom.com
Selector dkim
KeyFile /etc/opendkim/dkim.private
Socket inet:8891_at_localhost
ReportAddress postmaster_at_caerllewys.net
SendReports yes
PidFile /var/run/opendkim/opendkim.pid
UserID milter
Statistics /var/lib/opendkim/stats.dat
(adding epsilon3.caerllewys.net to Domain was an experiment, I don't
know whether it's doing anything for me. It doesn't appear to be helping.)
--
Phil Stracchino
Babylon Communications
phils_at_caerllewys.net
phil_at_co.ordinate.org
Landline: 603.293.8485
Received on Mon Apr 21 2014 - 19:10:57 PST