Ispconfig 3 as outgoing email server with dkim signature

Discussion in 'General' started by pongraczi, Sep 20, 2020.

  1. pongraczi

    pongraczi Member

    I created a mail gateway with ispconfig3 as shown on the upper half of the drawing below.
    • It can receive, filter and relay emails for a domain (example.tld) as expected.
    • Ispconfig 3 does not handle this domain, in other words, the domain example.tld does not added to email domains (as the manual said).
    • (Note: Ispconfig 3 can add dkim signatures for email domains which are added to email domains/aliases and handled by ispconfig.)
    My question, how can I turn the incoming email relay (ispconfig 3) into an outbound server, too, and add dkim signature for that specific domain?
    In other words, could ispconfig sign outgoing emails with dkim for a specific domain which not handled by ispconfig itself?


    In this specific case, ispconfig only should handle one email domain as relay and outbound email server (let's say example.tld), but in the future maybe more than one email domain should appear in relay and outbound, for example2.tld and example3.tld, where example2.tld should be relayed and example3.tld should handled fully in Ispconfig 3.

    So, I have no problems with adding dkim for email domains already handled by ispconfig using the WebUI of ispconfig, that works perfectly, thank you. Also, moving completely to Ispconfig 3 and abandon the legacy email server is not an option.

    I just would use Ispconfig 3 server to sign emails with dkim for specific domain(s) without unnecessarily messing the system.
    Thanks, István
  2. pongraczi

    pongraczi Member

  3. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    As the feature/configuration isn't currently supported in the ISPConfig ui, it will be necessary to "mess" with your setup. There are 2 pieces, allowing relaying from your legacy server for that domain, and configuring dkim signing for that domain's mail. Both amavis and rspamd perform dkim signing, if you have a preference for one over the other.
  4. pongraczi

    pongraczi Member

    Thank you for the feedback.
    Yes, messing is acceptable, especially it will not break ispconfig configuration and vice versa.
    It seems, rspamd could handle dkim signature without interfering ispconfig, so, my choice is rspamd.

Share This Page