Add to Favourites Add to Favourites    Print this Article Print this Article

Outgoing mail from Domain Aliases is not signing with DomainKeys

Symptoms:
Mail messages sent from Domain Aliases are not signed with DomainKeys.

The message header looks like the following:

DomainKey-Status: no signature
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on MAIL.DOMAIN.TLD
X-Spam-Level:
X-Spam-Status: No, score=-0.2 required=4.0 tests=AWL,BAYES_00,TVD_SPACE_RATIO autolearn=no version=3.2.3
DomainKey-Status: no signature
Received: (qmail 10133 invoked from network); 30 Jan 2009 16:30:24 +0100
Received: from MX.SENDER.DOMAIN.TLD (123.123.123.123) by MAIL.DOMAIN.TLD with SMTP; 30 Jan 2009 16:30:24 +0100
Received-SPF: pass (MAIL.DOMAIN.TLD: SPF record at SENDER.DOMAIN.TLD designates 123.123.123.123 as permitted sender)
Received: (qmail 19918 invoked from network); 30 Jan 2009 16:30:24 +0100

Resolution:
The feature will be implemented in future update of Parallels Plesk Panel: when DomainKey was enabled all messages sent from Domain Alias are signed with DomainKey.
Currently it is recommended to enable the feature for Domain Alias manually.

For Parallels Plesk Panel version 9.0 create the handler manually. You may use the following command:

~# $PRODUCT_ROOT_D/admin/bin/mailmng --add-handler --handler-name="dd51-domainkeys"
--handler-type="sender-domain" --handler-type-name= --priority=10 --context="signer"
--hook="before-remote" --executable="$PRODUCT_ROOT_D/handlers/hooks/dk_sign"

The step is not required for Parallels Plesk Panel version 8.x, just skip it.

For Parallels Plesk Panel versions 8.x and 9.0 copy the private key from Domain to Domain Alias:

~# cp -rp /etc/domainkeys/ /etc/domainkeys/

Where is the domain alias from which messages are sent.
And is the parent domain with enabled DomainKeys spam protection system.
Option -r is to copy the directory recursively, option -p is to preserve ownership and permissions.

NOTE: Verify that DomainKeys spam protection is enabled on server-wide and domain mail preferences.
For Parallels Plesk Panel version 8.x {Server -> Mail -> DomainKeys spam protection} and {Domains -> -> Mail -> Preferences -> Use DomainKeys spam protection system to sign outgoing e-mail messages}. For Parallels Plesk Panel version 9.x {Home -> Mail Server Settings -> DomainKeys spam protection} and {Domains -> -> Mail Accounts -> Mail Settings -> Use DomainKeys spam protection system to sign outgoing e-mail messages}

Was this answer helpful?

Also Read