October 22, 20241 yr Recently I've noticed that DKIM signatures were missing on outgoing emails. Well, obviously I should read this guide before... https://docs.froxlor.org/latest/general/migration-guide/2.2.html However I wouldn't expect updating Froxlor or switching from Milter to Rspamd, resulting in key removal, why is that made this way? Luckily, the old keys are still existing in /etc/postfix/dkim. Can I just restore them, by placing them back in the panel-domains table or is there more that needs to be done? Is there an API way to restore the keys? Is there a way to re-enable DKIM for all domains and generate new keys, If they don't exist? Recently added domains are stored with dkim-id starting by 1, would it work by only changing that to the number following the last old one?
October 22, 20241 yr 52 minutes ago, Exploit said: However I wouldn't expect updating Froxlor or switching from Milter to Rspamd, resulting in key removal, why is that made this way? Because there wasnt any milter-config-template in froxlor for years, hence it was never used. Also it's not only in the documentation, it's also in RED in the announcement: 53 minutes ago, Exploit said: Can I just restore them, by placing them back in the panel-domains table or is there more that needs to be done? Well, it would have been converted for you if you've enabled "antispam" in the updater...the alternative is: i don't want antispam and thus froxlor cleans its own tables. It's not meant for third-party usage and it's not supported. I cannot guarantee that dkim related fields in the tables will never be touched again...sorry. 58 minutes ago, Exploit said: Is there a way to re-enable DKIM for all domains and generate new keys, If they don't exist? Enable antispam feature and activate dkim for each domain... 58 minutes ago, Exploit said: Recently added domains are stored with dkim-id starting by 1, would it work by only changing that to the number following the last old one? You may try, but as said, I cannot guarantee or support third party / custom solutions
October 22, 20241 yr Author 1 hour ago, d00p said: Well, it would have been converted for you if you've enabled "antispam" ... .... You may try, but as said, I cannot guarantee or support third party / custom solutions Thank you for your fast answers! Well, I see no reason, to not enable "antispam", so far no problem, but what is going to be converted, is there another Hashing method used to generate the key-pairs? The hashes have been generated and managed with Froxlor before, that's why it surprised me that they got removed.
Create an account or sign in to comment