DKIM - не подписываются письма, куда копать?

kgtu5:
сервис запущен?

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check: pass
DomainKeys check: neutral
DKIM check: neutral
Sender-ID check: pass
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname: vm95273.local
Source IP: 111.22.33.44
mail-from: administrator@example.ru

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
ID(s) verified: smtp.mailfrom=administrator@example.ru
DNS record(s):
example.ru. SPF (no records)
example.ru. 3600 IN TXT "v=spf1 +a +mx ~all"
example.ru. 3600 IN A 111.22.33.44

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=administrator@example.ru
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified:

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result: pass
ID(s) verified: header.From=administrator@example.ru
DNS record(s):
example.ru. SPF (no records)
example.ru. 3600 IN TXT "v=spf1 +a +mx ~all"
example.ru. 3600 IN A 185.22.62.36

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.4.0 (2014-02-07)

Result: ham (-0.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1674]

RAS:
Заголовки письма в нашу студию ! :)

Delivered-To: somemail.ongoogle@gmail.com
Received: by 10.202.192.212 with SMTP id q203csp538697oif;
Fri, 24 Apr 2015 04:55:53 -0700 (PDT)
X-Received: by 10.194.120.3 with SMTP id ky3mr678832wjb.156.1429876552667;
Fri, 24 Apr 2015 04:55:52 -0700 (PDT)
Return-Path: <cd@example1.ru>
Received: from mail.example0.ru (mail.example0.ru. [111.22.33.44])
by mx.google.com with ESMTP id ba3si19073489wjc.86.2015.04.24.04.55.51
for <somemail.ongoogle@gmail.com>;
Fri, 24 Apr 2015 04:55:52 -0700 (PDT)
Received-SPF: pass (google.com: domain of cd@example1.ru designates 111.22.33.44 as permitted sender) client-ip=111.22.33.44;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of cd@example1.ru designates 111.22.33.44 as permitted sender) smtp.mail=cd@example1.ru;
dkim=pass header.i=@example0.ru
Received: from localhost (localhost [127.0.0.1])
by mail.example0.ru (Postfix) with ESMTP id 571AA405A3
for <somemail.ongoogle@gmail.com>; Fri, 24 Apr 2015 14:55:51 +0300 (MSK)
X-Virus-Scanned: Debian amavisd-new at example1.ru
Received: from mail.example0.ru ([127.0.0.1])
by localhost (vm95273.local [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id ijpOTjnvLYLm for <somemail.ongoogle@gmail.com>;
Fri, 24 Apr 2015 14:55:48 +0300 (MSK)
Received: from [100.75.105.111] (unknown [78.25.121.228])
by mail.example0.ru (Postfix) with ESMTPSA id 94546405A0
for <somemail.ongoogle@gmail.com>; Fri, 24 Apr 2015 14:55:48 +0300 (MSK)
DKIM-Filter: OpenDKIM Filter v2.9.1 mail.example0.ru 94546405A0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=example0.ru;
s=mail; t=1429876548;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=Date:From:To:Subject:From;
b=WRrR0BzhCGfFa37IZq0PmkuH4L+CeWJtrfzt1BsdcXjQ2vg8nJTNR28F8L3RDLlXG
XSTbOctfXmmGgOFJ63GYVBYoVuPxjd0GRrlv5l0b0RRoglj7xuirK2LBAT5G4rJ2xE
GeRP1EEyP70+UrRUapZ9nI0qCFte08aEsFmrAc18=
Message-ID: <553A2DC3.3090700@example1.ru>
Date: Fri, 24 Apr 2015 14:49:23 +0300
From: =?UTF-8?B?0J3QvtCz0YLQuNC60L7QvA==?= <cd@example1.ru>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: somemail.ongoogle@gmail.com
Subject: test
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

==========================================================
Original Email
==========================================================

Return-Path: <administrator@example.ru>
Received: from vm95273.local (111.22.33.44) by verifier.port25.com id h78qeu20i3gn for <check-auth2@verifier.port25.com>; Fri, 24 Apr 2015 08:19:59 -0400 (envelope-from <administrator@example.ru>)
Authentication-Results: verifier.port25.com; spf=pass smtp.mailfrom=administrator@example.ru
Authentication-Results: verifier.port25.com; domainkeys=neutral (message not signed) header.From=administrator@example.ru
Authentication-Results: verifier.port25.com; dkim=neutral (message not signed)
Authentication-Results: verifier.port25.com; sender-id=pass header.From=administrator@example.ru
Date: Fri, 24 Apr 2015 15:19:57 +0300
To: check-auth2@verifier.port25.com
From: administrator@example.ru
Subject: test Fri, 24 Apr 2015 15:19:57 +0300
X-Mailer: swaks v20130209.0 jetmore.org/john/code/swaks/
Message-ID: <0.0.0.1F8.1D07E88FB5B0EC6.0@verifier.port25.com>

DpoHro:
Вот еще вопрос, в мануалах фигурирует что postfix может быть настроен с chroot, у меня без, насколько это критично?

LinuxMan:
А вы уверены, что chroot реально не включён? :) В дебиане, например, он по-умолчанию поставляется в этом режиме.

Если в конфиге opendkim прописан именно путь /var/run/opendkim/opendkim.sock, а постфикс работает именно в chroot, то он будет искать сокет в /var/spool/postfix/var/run/opendkim, и выдавать ошибку, как у вас, если не найдёт.

DpoHro:
видимо сервер-получатель не может либо соединиться с моим, чтобы проверить ключ

LinuxMan:
А получатель и не должен соединяться с вашим сервером. Но должен сравнивать dkim-подпись письма с подписью в вашем домене.

DpoHro:
Вот еще вопрос, у меня 3 домена, мне для каждого ключи делать нужно?
майл-сервер то на одном домене работает!

DpoHro:
Зачем мне тогда нужно открывать сокет ?