Dkim - no signing domain match

Hello,

I am very pleased to have spun up my first freepbx server with the help of crosstalk solutions youtube and this forum. I am using office365 for email and the guide here was very helpful to get email going: How+to+setup+FreePBX+to+work+with+Office+365+Exchange+Email

I am running FreePBX 15.0.17.63. CENTOS and freepbx is up to date

Working through this DKIM wiki How-to+Enable+SPF+DKIM+DMARC+on+FreePBX I have hit a roadblock. messages are not being signed with the error: no signing domain match for ‘mydomain_com’

log:
mypbx postfix/cleanup[4378]: 7EF5B61A9DFF: message-id=<[email protected]_com>
mypbx opendkim[4105]: 7EF5B61A9DFF: no signing domain match for ‘mydomain_com’
mypbx opendkim[4105]: 7EF5B61A9DFF: no signing subdomain match for ‘mydomain_com’
mypbx opendkim[4105]: 7EF5B61A9DFF: no signature data
mypbx postfix/qmgr[4201]: 7EF5B61A9DFF: from=<asterisk@mydomain_com>, size=545, nrcpt=1 (queue active)

[root@mypbx keys]# cat /etc/opendkim.conf
PidFile /var/run/opendkim/opendkim.pid
Mode sv
UserID opendkim:opendkim
Socket inet:8891@localhost
Umask 002
SoftwareHeader yes
Canonicalization relaxed/simple
Domain mydomain_com
Selector freepbx
MinimumKeyBits 1024
KeyFile /etc/opendkim/keys/freepbx.private
#KeyTable /etc/opendkim/KeyTable
#SigningTable refile:/etc/opendkim/SigningTable
#ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
#InternalHosts refile:/etc/opendkim/TrustedHosts
OversignHeaders From

[root@mypbx keys]# cat /etc/postfix/generic
asterisk@ support@mydomain_com
asterisk@mydomain_com support@mydomain_com
[email protected]_com support@mydomain_com
@mypbx.mydomain_com @mydomain_com

I see the message id is *@mypbx.mydomain_com and the from field is asterisk@mydomain_com. my preference is to have the messages sending as support@mydomain_com which matches the mailbox and presumably sign the messages, but I have not been able to accomplish this.

Any guidance is appreciated. thank you for taking a look.

[had to butcher this since new users are not allowed to post links]strong text

I was able to finally resolve this by configuring the SigningTable and enabling in the opendkim.conf.

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.