Jump to content
Froxlor Forum
  • 0

DKIM content removed from panel-domains table, after changing from dkim-milter to Rspamd


Question

Posted

Recently I've noticed that DKIM signatures were missing on outgoing emails.

Well, obviously I should read this guide before...
https://docs.froxlor.org/latest/general/migration-guide/2.2.html

However I wouldn't expect updating Froxlor or switching from Milter to Rspamd, resulting in key removal, why is that made this way?

Luckily, the old keys are still existing in /etc/postfix/dkim. Can I just restore them, by placing them back in the panel-domains table or is there more that needs to be done? Is there an API way to restore the keys?

Is there a way to re-enable DKIM for all domains and generate new keys, If they don't exist?

Recently added domains are stored with dkim-id starting by 1, would it work by only changing that to the number following the last old one?

2 answers to this question

Recommended Posts

  • 1
Posted
52 minutes ago, Exploit said:

However I wouldn't expect updating Froxlor or switching from Milter to Rspamd, resulting in key removal, why is that made this way?

Because there wasnt any milter-config-template in froxlor for years, hence it was never used. Also it's not only in the documentation, it's also in RED in the announcement: 

 

53 minutes ago, Exploit said:

Can I just restore them, by placing them back in the panel-domains table or is there more that needs to be done?

Well, it would have been converted for you if you've enabled "antispam" in the updater...the alternative is: i don't want antispam and thus froxlor cleans its own tables. It's not meant for third-party usage and it's not supported. I cannot guarantee that dkim related fields in the tables will never be touched again...sorry.

 

58 minutes ago, Exploit said:

Is there a way to re-enable DKIM for all domains and generate new keys, If they don't exist?

Enable antispam feature and activate dkim for each domain...

 

58 minutes ago, Exploit said:

Recently added domains are stored with dkim-id starting by 1, would it work by only changing that to the number following the last old one?

You may try, but as said, I cannot guarantee or support third party / custom solutions

  • 0
Posted
1 hour ago, d00p said:

Well, it would have been converted for you if you've enabled "antispam" ...

....

You may try, but as said, I cannot guarantee or support third party / custom solutions

Thank you for your fast answers!

Well, I see no reason, to not enable "antispam", so far no problem, but what is going to be converted, is there another Hashing method used to generate the key-pairs?

The hashes have been generated and managed with Froxlor before, that's why it surprised me that they got removed.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×
×
  • Create New...