My nameservers are missing TrustedHosts and KeyTable - Is this normal?

hi

My 2 nameservers which are run on my CWP server are eg:

• ns1.mydomain.com
• ns2.mydomain.com

I have DKIM and SPF enables and running and all my other domains including the hostname for the server have all green ticks in the DKIM & SPF Manager.

I looked in the following files/locations and found no reference to the nameserver domains

• TruestedHosts File Location: /etc/opendkim/TrustedHosts
• SigningTable File Location: /etc/opendkim/SigningTable
• KeyTable File Location: /etc/opendkim/KeyTable
• User Keys Files Location: /etc/opendkim/userkeys/

The Domains shown in the DKIM & SPF manager for the nameservers do not have entries for the following but still show as green

• v=DKIM1
• v=spf1

So my questions are:

• Is this normal?
• Is this a bug or should i report a feature request to get the nameserver scripts add these records in
• Can I add these in manually for the time being and is there any instructions out there on how to generate the keys? Add the entries should be easy to do manually unless there is a script that does it all

you need to have dkim i opnedkim configuration and the same on your dns zone on the domain nameservers.
Meaning that if you don't use cwp for name servers then you need to manually copy it to your nameservers.

Note: this info is only if you send emails from your cwp server.

I am not what your instructions above mean

I am using CWP as my name servers.

I am sending emails from my server.

These are example domains I am using (obviously) but both ns1 and ns2 resolve to my CWP servers real IP address. 31.x.x.x

The keys and records for DKIM are never created for ns1.mydomain.com or ns2.mydomain.com

The DNS zones are also not updated  with SPK/DKIM even though the Dkim & SPF mananger say they have been with green ticks.

Is this intentional because the nameservers are assumed to never send emails?

In my dkim manager I have 1 domain that has RED for trusted host.  The other 20 domains are GREEN.  Cert is ok.

Why is only 1 domain not trusted.

@namaste

Just a thought, can you re-apply the DKIM for the untrusted domain using:

Email --> DKIM Manager --> Add DKIM & SPF --> Add DKIM