bambocher / docker-exim-relay Goto Github PK

Hey,

Great descriptions and all, and I think I've followed all steps, but I seem unable to make a setup that send DKIM signed mails. I've overcome the initial issue with lacking permissions on the volume (exim ran as uid 100, gid 101), and have gotten the key generated (and published a DKIM key in the DNS), at: dkim._domainkey.kbh.mbwarez.dk

My Compose file is as follows:

smtp:
  image: bambucha/exim-relay
  user: exim
  ports:
    - 192.168.1.11:25:25
  volumes:
    - /mnt/systems/configs/mailserver/keys:/dkim
  hostname: mail.kbh.mbwarez.dk
  environment:
    - RELAY_FROM_HOSTS=10.0.0.0/8:172.16.0.0/12:192.168.0.0/16
    - DKIM_KEY_SIZE=1024
    - DKIM_SELECTOR=dkim
    - DKIM_SIGN_HEADERS=Date:From:To:Subject:Message-ID
    - DKIM_DOMAINS=kbh.mbwarez.dk
  restart: always

My log says the following:

# docker-compose up
Starting mailserver_smtp_1
Attaching to mailserver_smtp_1
smtp_1 | 2017-01-10 00:16:29 exim 4.87 daemon started: pid=5, -q15m, listening for SMTP on port 25 (IPv4)
smtp_1 | 2017-01-10 00:16:33 1cQk77-000007-7z <= [email protected] H=(MB-WIN10) [192.168.1.100] P=esmtp S=326 T="Hi" for [email protected]
smtp_1 | 2017-01-10 00:16:34 1cQk77-000007-7z => [email protected] F=<[email protected]> R=dnslookup T=remote_smtp H=aspmx.l.google.com [108.177.96.27] C="250 2.0.0 OK 1484007394 l5si123444wju.6 - gsmtp"
smtp_1 | 2017-01-10 00:16:34 1cQk77-000007-7z Completed
^CGracefully stopping... (press Ctrl+C again to force)
Stopping mailserver_smtp_1 ... done

I send the actual mail with a powershell cmdlet from a windows client (as seen in the logs, it all arrives as expected).

What am I doing wrong?

Note: The mails do arrive at my Gmail inbox, the SPF validates, but the mail is with no trace of DKIM signatures.

The current ACL will accept any mail from any host so long as the recipient has a valid domain + MX record.

acl_check_rcpt:
  accept hosts = +relay_from_hosts  # Accept and exit ACL for any host in relay_from_hosts
  require verify = recipient        # Require recipient is valid or Deny and exit ACL
  accept                            # Accept any mail that reaches here

Either the "accept host" and "require verify" lines should be the other way around with a deny/drop ending or "accept host" should be "require host"

Hi Dmitry,
I would like to ask you do you know how to get the most detailed debug logging?

I tried putting in log_selector = +all exim.conf but im still missing a lot of logging, doest seem to make much of a difference, if at all.

Not sure why, if there is not more logging or that this alpine exim package is limited in some way?
Hope you can shed some light on it. Or have a way to get detailed logging. I am currently facing a issue with relaying to another exim server, with the starttls tls upgrade seems to fail. I would like to log everything including the tls handshake.

Thanks