<![CDATA[DKIM and DMARC for built-in outgoing mail]]>Outgoing mail from the built in email solution does not have a DKIM signature or a DMARC signature.
Is this possible to enable or configure?

]]>https://forum.cloudron.io/topic/1675/dkim-and-dmarc-for-built-in-outgoing-mailRSS for NodeSun, 12 Apr 2026 16:26:23 GMTSun, 10 Feb 2019 08:32:59 GMT60<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Tue, 10 Aug 2021 08:06:42 GMT]]>DMARC is about email security. Traditionally this was about inbound protection, where DMARC can be used. Though, DMARC is more about outbound email protection.

]]>https://forum.cloudron.io/post/35060https://forum.cloudron.io/post/35060Tue, 10 Aug 2021 08:06:42 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Mon, 17 Jun 2019 16:06:14 GMT]]>I can confirm that this is finally fixed now šŸ‘

]]>https://forum.cloudron.io/post/3781https://forum.cloudron.io/post/3781Mon, 17 Jun 2019 16:06:14 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 07 Jun 2019 11:40:08 GMT]]>@girish Nice! Will definitely try again after the release.

]]>https://forum.cloudron.io/post/3714https://forum.cloudron.io/post/3714Fri, 07 Jun 2019 11:40:08 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 07 Jun 2019 00:15:50 GMT]]>This is fixed now in 4.1 (which will get released next week or so)

]]>https://forum.cloudron.io/post/3711https://forum.cloudron.io/post/3711Fri, 07 Jun 2019 00:15:50 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 06 Jun 2019 21:28:35 GMT]]>A fix for now is to just run chmod +r /home/yellowtent/boxdata/mail/dkim/*/private.

As for certs for renewing, @ruben do you have incoming port 80 open on your server? The cert issue is not related to dkim keys.

]]>https://forum.cloudron.io/post/3710https://forum.cloudron.io/post/3710Thu, 06 Jun 2019 21:28:35 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 06 Jun 2019 21:16:21 GMT]]>@ruben thanks, I was able to reproduce the issue. It is related to the ubuntu image on scaleway. We relied on the user id to match between the host OS and the container. For some reason, adding a new user on scaleway starts from uid 1001 instead of 1000. Looking into a fix.

]]>https://forum.cloudron.io/post/3709https://forum.cloudron.io/post/3709Thu, 06 Jun 2019 21:16:21 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 06 Jun 2019 05:18:07 GMT]]>@girish Iā€™m using the wildcard DNS-option.

]]>https://forum.cloudron.io/post/3693https://forum.cloudron.io/post/3693Thu, 06 Jun 2019 05:18:07 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Wed, 05 Jun 2019 16:26:52 GMT]]>@ruben Thanks. Can you tell me which DNS provider you are using? Let me try to reproduce the bug with that backend.

]]>https://forum.cloudron.io/post/3688https://forum.cloudron.io/post/3688Wed, 05 Jun 2019 16:26:52 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Wed, 05 Jun 2019 09:04:28 GMT]]>@girish I had already deleted my test-setup; so I just set up a new one from scratch at scaleway. It results in the same errors and permissions as above.

]]>https://forum.cloudron.io/post/3687https://forum.cloudron.io/post/3687Wed, 05 Jun 2019 09:04:28 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 31 May 2019 08:45:08 GMT]]>@girish Hi, I can confirm that this issue is still there with 2 domains.
Unfortunately I didn't check after a fresh install and just 1 domain.

]]>https://forum.cloudron.io/post/3651https://forum.cloudron.io/post/3651Fri, 31 May 2019 08:45:08 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 31 May 2019 05:06:45 GMT]]>@clouddaz @ruben @subven Any of you still facing this issue? I would love to get to the bottom of this since I thought this got fixed, but clearly hasn't.

]]>https://forum.cloudron.io/post/3644https://forum.cloudron.io/post/3644Fri, 31 May 2019 05:06:45 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 17 May 2019 06:58:46 GMT]]>@subven yes, the file exists. These are the permissions:

drwxr-xr-x 2 yellowtent yellowtent 4096 May 10 10:33 ./
drwxr-xr-x 4 yellowtent yellowtent 4096 May 10 11:27 ../
-rw------- 1 yellowtent yellowtent  887 May 10 10:33 private
-rw-r--r-- 1 yellowtent yellowtent  272 May 10 10:33 public
-rw-r--r-- 1 yellowtent yellowtent    8 May 10 10:33 selector

The DKIM-signing works after a chmod 777 private but I don't think that 's a sustainable solution.

The 'renew all certs'-button does not seem te renew my certificates.
My DNS-setup is 'wildcard', so I don't think it 's possible to re-setup dns?

I just added an extra domain (with cloudron 4.0.3) and it results in the same permissions:

drwxr-xr-x 2 yellowtent yellowtent 4096 May 17 06:54 ./
drwxr-xr-x 5 yellowtent yellowtent 4096 May 17 06:54 ../
-rw------- 1 yellowtent yellowtent  887 May 17 06:54 private
-rw-r--r-- 1 yellowtent yellowtent  272 May 17 06:54 public
-rw-r--r-- 1 yellowtent yellowtent    8 May 17 06:54 selector
]]>https://forum.cloudron.io/post/3538https://forum.cloudron.io/post/3538Fri, 17 May 2019 06:58:46 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Wed, 15 May 2019 21:00:11 GMT]]>@ruben did you checked if the file exists? What are the file permissions/owner/group? Does the file contains a certificate? With cloudron 4.X.X you have the ability to re-setup DNS (maybe this fixes the issue?). What about renewing all certs (--> Domain)?

@murgero cloudron is at v4.0.3 at the moment. Do you use a custom hoster image? I'm on a netcup image and the message popped up today. You're off topic by the way...

]]>https://forum.cloudron.io/post/3511https://forum.cloudron.io/post/3511Wed, 15 May 2019 21:00:11 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 10 May 2019 18:39:28 GMT]]>@ruben 4.0.0 is out? how do I install? my cloudron checks for updates but says it's up to date??

]]>https://forum.cloudron.io/post/3483https://forum.cloudron.io/post/3483Fri, 10 May 2019 18:39:28 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Fri, 10 May 2019 12:57:09 GMT]]>I experienced the same issue today on a fresh new installation v4.0.0:

2019-05-10T11:54:20.000Z [INFO] [-] [core] [outbound] Sending email as a transaction
2019-05-10T11:54:20.000Z EACCES: permission denied, open '/app/haraka-config/config/dkim/mydomain.net/private'
2019-05-10T11:54:20.000Z [NOTICE] [-] [dkim_sign] skipped: no private key for mydomain.net
2019-05-10T11:54:20.000Z [INFO] [-] [core] [outbound] Processing delivery for domain: mail-tester.com

so it seems that this bug is still out there...

]]>https://forum.cloudron.io/post/3477https://forum.cloudron.io/post/3477Fri, 10 May 2019 12:57:09 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Sun, 10 Mar 2019 20:56:18 GMT]]>This is fixed in 3.5.4 now.

]]>https://forum.cloudron.io/post/3187https://forum.cloudron.io/post/3187Sun, 10 Mar 2019 20:56:18 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 28 Feb 2019 21:28:31 GMT]]>I noticed that some folders maybe have wrong permissions. "cloudron" is the user I used to install Cloudron (with sudo) on the server.
2019-02-28 22_24_43-root@h2812623_ _home_yellowtent_boxdata_mail.png
Most of the folders/files under /home/yellowtent are owned by yellowtent, some by root and a small percentage is owned by cloudron. Could this result in the error we see?

]]>https://forum.cloudron.io/post/3123https://forum.cloudron.io/post/3123Thu, 28 Feb 2019 21:28:31 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Tue, 26 Feb 2019 22:21:35 GMT]]>I have the same issue on my cloudron (standard plan). All checkmarks at SMTP Status are green. I use Mailjet (free account) at the moment to get around this issue.

2019-02-26T21:12:32.000Z EACCES: permission denied, open '/app/haraka-config/config/dkim/*****.******/private'
2019-02-26T21:12:32.000Z [NOTICE] [-] [dkim_sign] skipped: no private key for *****.******

cloudron@h2812623:/home/yellowtent/boxdata/mail/dkim/*****.******$ ll
total 20
drwxr-xr-x 2 yellowtent yellowtent 4096 Jan  9 07:29 ./
drwxr-xr-x 3 yellowtent yellowtent 4096 Dez  8 23:13 ../
-rw------- 1 yellowtent yellowtent  891 Dez  8 23:13 private
-rw-r--r-- 1 yellowtent yellowtent  272 Dez  8 23:13 public
-rw-r--r-- 1 yellowtent yellowtent    8 Dez  8 23:13 selector

@girish please let us know if you figure out what causes this behavior.

]]>https://forum.cloudron.io/post/3111https://forum.cloudron.io/post/3111Tue, 26 Feb 2019 22:21:35 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 14 Feb 2019 22:57:34 GMT]]>@clouddaz Can you give us SSH access so I can debug the issue? Support -> Enable Remote support. Thanks!

]]>https://forum.cloudron.io/post/3029https://forum.cloudron.io/post/3029Thu, 14 Feb 2019 22:57:34 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 14 Feb 2019 12:35:27 GMT]]>Yes both DKIM keys are present. chown and mail restart were completed but still no DKIM or DMARC signing. This is the first domain (hostname) not a subsequent added domain, if that helps.

]]>https://forum.cloudron.io/post/3023https://forum.cloudron.io/post/3023Thu, 14 Feb 2019 12:35:27 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 14 Feb 2019 03:02:00 GMT]]>@clouddaz That does indeed seem like the problem.

On the server: Go to the directory /home/yellowtent/boxdata/mail/dkim/<domain>. It should have the public/private DKIM keys. Are they present? If they are present, then chown -R yellowtent:yellowtent /home/yellowtent/boxdata/mail/dkim and then go to services -> mail and restart it.

If they are not present, let me know, we have to see why they are not present (they are created at domain addition time).

]]>https://forum.cloudron.io/post/3018https://forum.cloudron.io/post/3018Thu, 14 Feb 2019 03:02:00 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 14 Feb 2019 01:24:05 GMT]]>And I just noticed:

Feb 14 01:02:24 [INFO] [-] [core] [outbound] Sending email as a transaction
Feb 14 01:02:24 [NOTICE] [-] [dkim_sign] skipped: no private key for lily.dmnw.net
Feb 14 01:02:24 [INFO] [-] [core] [outbound] Processing delivery for domain: cloudron.io
Feb 14 01:02:24 EACCES: permission denied, open '/app/haraka-config/config/dkim/lily.dmnw.net/private'
]]>https://forum.cloudron.io/post/3014https://forum.cloudron.io/post/3014Thu, 14 Feb 2019 01:24:05 GMT<![CDATA[Reply to DKIM and DMARC for built-in outgoing mail on Thu, 14 Feb 2019 01:03:58 GMT]]>I've just sent it, but don't be surprised if it turns up in your spam folder. Thanks in advance for checking.

]]>https://forum.cloudron.io/post/3013https://forum.cloudron.io/post/3013Thu, 14 Feb 2019 01:03:58 GMT