bambocher / docker-exim-relay Goto Github PK
View Code? Open in Web Editor NEWExim relay Docker image based on Alpine Linux and support DKIM
Home Page: https://hub.docker.com/r/bambucha/exim-relay/
License: MIT License
Exim relay Docker image based on Alpine Linux and support DKIM
Home Page: https://hub.docker.com/r/bambucha/exim-relay/
License: MIT License
Hey,
Great descriptions and all, and I think I've followed all steps, but I seem unable to make a setup that send DKIM signed mails. I've overcome the initial issue with lacking permissions on the volume (exim ran as uid 100, gid 101), and have gotten the key generated (and published a DKIM key in the DNS), at: dkim._domainkey.kbh.mbwarez.dk
My Compose file is as follows:
smtp:
image: bambucha/exim-relay
user: exim
ports:
- 192.168.1.11:25:25
volumes:
- /mnt/systems/configs/mailserver/keys:/dkim
hostname: mail.kbh.mbwarez.dk
environment:
- RELAY_FROM_HOSTS=10.0.0.0/8:172.16.0.0/12:192.168.0.0/16
- DKIM_KEY_SIZE=1024
- DKIM_SELECTOR=dkim
- DKIM_SIGN_HEADERS=Date:From:To:Subject:Message-ID
- DKIM_DOMAINS=kbh.mbwarez.dk
restart: always
My log says the following:
# docker-compose up
Starting mailserver_smtp_1
Attaching to mailserver_smtp_1
smtp_1 | 2017-01-10 00:16:29 exim 4.87 daemon started: pid=5, -q15m, listening for SMTP on port 25 (IPv4)
smtp_1 | 2017-01-10 00:16:33 1cQk77-000007-7z <= [email protected] H=(MB-WIN10) [192.168.1.100] P=esmtp S=326 T="Hi" for [email protected]
smtp_1 | 2017-01-10 00:16:34 1cQk77-000007-7z => [email protected] F=<[email protected]> R=dnslookup T=remote_smtp H=aspmx.l.google.com [108.177.96.27] C="250 2.0.0 OK 1484007394 l5si123444wju.6 - gsmtp"
smtp_1 | 2017-01-10 00:16:34 1cQk77-000007-7z Completed
^CGracefully stopping... (press Ctrl+C again to force)
Stopping mailserver_smtp_1 ... done
I send the actual mail with a powershell cmdlet from a windows client (as seen in the logs, it all arrives as expected).
What am I doing wrong?
Note: The mails do arrive at my Gmail inbox, the SPF validates, but the mail is with no trace of DKIM signatures.
The current ACL will accept any mail from any host so long as the recipient has a valid domain + MX record.
acl_check_rcpt:
accept hosts = +relay_from_hosts # Accept and exit ACL for any host in relay_from_hosts
require verify = recipient # Require recipient is valid or Deny and exit ACL
accept # Accept any mail that reaches here
Either the "accept host" and "require verify" lines should be the other way around with a deny/drop ending or "accept host" should be "require host"
Hi Dmitry,
I would like to ask you do you know how to get the most detailed debug logging?
I tried putting in log_selector = +all
exim.conf but im still missing a lot of logging, doest seem to make much of a difference, if at all.
Not sure why, if there is not more logging or that this alpine exim package is limited in some way?
Hope you can shed some light on it. Or have a way to get detailed logging. I am currently facing a issue with relaying to another exim server, with the starttls tls upgrade seems to fail. I would like to log everything including the tls handshake.
Thanks
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.