Enable DKIM behind NAT with smarthost

BeSafe

• March 12, 2014 04:05

Hello guys, I want to enable DKIM but I have a question.. 1) My Cpanel machine is behind NAT 2) Every zone/user has a mx record that point to a smarthost (antispam relay) If I try to use the "Email Authentication" It seems that all the keys and all the DNS stuff were generated starting with the DNS records pointing to the public ip of the cpanel and not to the MX. Is this correct ? Many thanks in advance.

• 

  vanessa

  • March 12, 2014 14:53

  The SPF record should contain the IP that email is being sent from. This may or many not be the same as the MX record (MX records only apply to incoming email, not outgoing). If you're not sure, send an email from one of these accounts and check the headers to see what IP it was sent from. Whoever your SMTP provider is should be able to provide you with the correct SPF records.

  0
• 

  cPanelMichael

  • March 12, 2014 17:00

  Hello :) You mentioned setting up a smart host through the DNS Zone. Have you also setup a smart host using the option provided under the "Mail" tab in the "Exim Configuration Manager"? The following post might be helpful if attempting to enable DKIM with your smart host configuration: DKIM with Smart Host Thank you.

  0
• 

  BeSafe

  • March 17, 2014 08:43

  [quote="cPanelMichael, post: 1594292"> [cut] Have you also setup a smart host using the option provided under the "Mail" tab in the "Exim Configuration Manager"?
  NO,I've modified the file exim.conf.local cat exim.conf.local @ROUTERSTART@ smart_route: driver = manualroute domains = !+local_domains transport = remote_smtp route_list = * xxx.xxx.xxx.xxx Where xxx is the Ip of the smarthost. [quote="cPanelMichael, post: 1594292"> The following post might be helpful if attempting to enable DKIM with your smart host configuration: DKIM with Smart Host
  Nice ! But if I change the transport from "remote_smtp" to "dkim_remote_smtp" I will encounter problems with domains that haven't the DKIM setup ? Many thanks in advance !

  0
• 

  cPanelMichael

  • March 19, 2014 16:12

  [quote="BeSafe, post: 1597462">Nice ! But if I change the transport from "remote_smtp" to "dkim_remote_smtp" I will encounter problems with domains that haven't the DKIM setup ?
  Could you elaborate on what type of problems? Do you mean that not all of your domain names use DKIM? Thank you.

  0

Please sign in to leave a comment.