Control Web Panel

WebPanel => How to => Topic started by: 6Sense on June 27, 2025, 03:37:50 AM

Title: Installing ARC on ALMA 8/9
Post by: 6Sense on June 27, 2025, 03:37:50 AM

Hi everyone,

Just wondering if anyone is brave enough to post a how to set up the new ARC authentication for email on ALMA 8/9 CWP servers. I'd love to get it sorted early on.

Smiles @Starburst  :)

Title: Re: Installing ARC on ALMA 8/9
Post by: overseer on June 27, 2025, 01:31:29 PM

You can follow Netino's guide for rspamd -- it works on Alma 8 and will get you ARC headers.

Title: Re: Installing ARC on ALMA 8/9
Post by: Starburst on June 27, 2025, 02:26:19 PM

That thread can be found at: https://forum.centos-webpanel.com/how-to/(howto)-install-rspamd/ (https://forum.centos-webpanel.com/how-to/(howto)-install-rspamd/)

Title: Re: Installing ARC on ALMA 8/9
Post by: overseer on June 27, 2025, 06:56:57 PM

Just note one formatting error in his instructions (these two were grouped together in his instructions but are separate files):

- file /etc/rspamd/local.d/worker-proxy.inc

Code: [Select]

bind_socket = "127.0.0.1:11332";
milter = yes;
timeout = 120s;
upstream "local" {
 default = yes;
 self_scan = yes;
}

- file /etc/rspamd/local.d/logging.inc

Code: [Select]

type = "file";
filename = "/var/log/rspamd/rspamd.log";
level = "error";
debug_modules = [];

Title: Re: Installing ARC on ALMA 8/9
Post by: Starburst on June 28, 2025, 01:11:20 AM

I just looked at a test email from our domain name to a google account, and it has ARC headers.  :o

(https://i.postimg.cc/T5w4M4Jd/ARC-Header-domain-to-GMail.png) (https://postimg.cc/T5w4M4Jd)
FOIA - I'll see your header, and raise you a Sharpie...  ;D

And I'm not using rspamd or OpenARC

Title: Re: Installing ARC on ALMA 8/9
Post by: 6Sense on June 30, 2025, 12:23:50 AM

Thanks all.

I think I'll have to research it further when I get some time (the WHM servers I manage all have ARC without any set up required). Was hoping for an easy fix & although Netino's guide looks great I wanted to retain SpamAssassin & CWP defaults.

Title: Re: Installing ARC on ALMA 8/9
Post by: Starburst on June 30, 2025, 12:53:18 AM

Quote from: 6Sense on June 30, 2025, 12:23:50 AM

Thanks all.

I think I'll have to research it further when I get some time (the WHM servers I manage all have ARC without any set up required). Was hoping for an easy fix & although Netino's guide looks great I wanted to retain SpamAssassin & CWP defaults.

@6Sense

I can understand that.

But as you can see from the screenshot above, we have ARC enabled.
Just have to add 4 lines to the bottom of main.cf

Title: Re: Installing ARC on ALMA 8/9
Post by: 6Sense on June 30, 2025, 11:59:27 AM

@Starburst

OK, I assumed that was some advanced modification you had done to enable ARC

What are the 4 lines & where do I add?

Title: Re: Installing ARC on ALMA 8/9
Post by: Starburst on June 30, 2025, 12:42:10 PM

Info is at:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/)

Those 4 lines go at the end of main.cf, IF they are not there already.

And while you have main.cf open, you need to add the line
UNDER (# rules restrictions), under smtpd_helo_required = yes ADD:

Code: [Select]

smtp_helo_name = $myhostname
And then restart postfix:

Code: [Select]

systemctl restart postfix
Let me know if you have any questions.

Title: Re: Installing ARC on ALMA 8/9
Post by: 6Sense on June 30, 2025, 11:43:54 PM

Thanks mate, you're a gem! @Starburst

I now have ARC headers & hopefully never again have to explain to clients why their forwarded emails are bouncing  :)

Title: Re: Installing ARC on ALMA 8/9
Post by: Starburst on July 01, 2025, 02:11:14 PM

You still always want to monitor you IP's.

Check out HetrixTools (I am not associated wit them them), they have a Free level to monitor RBL's

Title: Re: Installing ARC on ALMA 8/9
Post by: overseer on July 01, 2025, 02:15:26 PM

I've been using RBLmon, likewise a free tier:
https://rblmon.com (https://rblmon.com)