DKIM and DMARC for built-in outgoing mail

[ruben]

@girish I had already deleted my test-setup; so I just set up a new one from scratch at scaleway. It results in the same errors and permissions as above.

[girish]

@ruben Thanks. Can you tell me which DNS provider you are using? Let me try to reproduce the bug with that backend.

[ruben]

@girish I’m using the wildcard DNS-option.

[girish]

@ruben thanks, I was able to reproduce the issue. It is related to the ubuntu image on scaleway. We relied on the user id to match between the host OS and the container. For some reason, adding a new user on scaleway starts from uid 1001 instead of 1000. Looking into a fix.

[girish]

A fix for now is to just run chmod +r /home/yellowtent/boxdata/mail/dkim/*/private.

As for certs for renewing, @ruben do you have incoming port 80 open on your server? The cert issue is not related to dkim keys.

[girish]

This is fixed now in 4.1 (which will get released next week or so)

[ruben]

@girish Nice! Will definitely try again after the release.

[subven]

I can confirm that this is finally fixed now

[pintudason]

DMARC is about email security. Traditionally this was about inbound protection, where DMARC can be used. Though, DMARC is more about outbound email protection.