Control Web Panel

WebPanel => E-Mail => DKIM => Topic started by: shoulders on December 28, 2021, 01:00:13 PM

Title: My nameservers are missing TrustedHosts and KeyTable - Is this normal?
Post by: shoulders on December 28, 2021, 01:00:13 PM

hi

My 2 nameservers which are run on my CWP server are eg:

• ns1.mydomain.com
• ns2.mydomain.com

I have DKIM and SPF enables and running and all my other domains including the hostname for the server have all green ticks in the DKIM & SPF Manager.

I looked in the following files/locations and found no reference to the nameserver domains

• TruestedHosts File Location: /etc/opendkim/TrustedHosts
• SigningTable File Location: /etc/opendkim/SigningTable
• KeyTable File Location: /etc/opendkim/KeyTable
• User Keys Files Location: /etc/opendkim/userkeys/

The Domains shown in the DKIM & SPF manager for the nameservers do not have entries for the following but still show as green

• v=DKIM1
• v=spf1

So my questions are:

• Is this normal?
• Is this a bug or should i report a feature request to get the nameserver scripts add these records in
• Can I add these in manually for the time being and is there any instructions out there on how to generate the keys? Add the entries should be easy to do manually unless there is a script that does it all

Title: Re: My nameservers are missing TrustedHosts and KeyTable - Is this normal?
Post by: studio4host on December 28, 2021, 01:46:14 PM

you need to have dkim i opnedkim configuration and the same on your dns zone on the domain nameservers.
Meaning that if you don't use cwp for name servers then you need to manually copy it to your nameservers.

Note: this info is only if you send emails from your cwp server.

Title: Re: My nameservers are missing TrustedHosts and KeyTable - Is this normal?
Post by: shoulders on December 28, 2021, 01:58:29 PM

I am not what your instructions above mean :(

I am using CWP as my name servers.

I am sending emails from my server.

These are example domains I am using (obviously) but both ns1 and ns2 resolve to my CWP servers real IP address. 31.x.x.x

The keys and records for DKIM are never created for ns1.mydomain.com or ns2.mydomain.com

The DNS zones are also not updated  with SPK/DKIM even though the Dkim & SPF mananger say they have been with green ticks.

Is this intentional because the nameservers are assumed to never send emails?

Title: Re: My nameservers are missing TrustedHosts and KeyTable - Is this normal?
Post by: Namaste on December 29, 2021, 01:55:48 PM

In my dkim manager I have 1 domain that has RED for trusted host.  The other 20 domains are GREEN.  Cert is ok.

Why is only 1 domain not trusted.

Title: Re: My nameservers are missing TrustedHosts and KeyTable - Is this normal?
Post by: shoulders on January 02, 2022, 09:56:23 AM

@namaste

Just a thought, can you re-apply the DKIM for the untrusted domain using:

Email --> DKIM Manager --> Add DKIM & SPF --> Add DKIM