Changes

From SME Server
Jump to navigationJump to search
1,887 bytes added ,  12:35, 30 May 2019
Line 422: Line 422:     
====Learn Contrib====
 
====Learn Contrib====
The [[Learn]] contrib was intended to install and configure the bayes training tools LearnAsSpam & LarnAsHam.
+
The [[Learn]] contrib is intended to install and configure the bayes training tools LearnAsSpam & LarnAsHam.
    
====Reset the Bayes Database====
 
====Reset the Bayes Database====
Line 559: Line 559:  
  -click OK > NEXT > FINISHED
 
  -click OK > NEXT > FINISHED
 
  -you're finished, your email should work now
 
  -you're finished, your email should work now
 +
 +
===Outlook 2013 on Windows 10 gives "An unknown error occurred, error code 0x8004011c" when attempting an IMAP connection for a DOMAIN user===
 +
This is a known issue with the above combination of Windows and Outlook version as of 2015-02-18 (see: [http://bugs.contribs.org/show_bug.cgi?id=9618 Bug 9618]).
 +
 +
The following registry key resolves the issue:
 +
To work around this problem, set the value of the ProtectionPolicy registry entry to 1 to enable local backup of the MasterKey instead of requiring a RWDC in the following registry subkey:
 +
 +
[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb]
 +
"ProtectionPolicy"=dword:00000001
 +
 +
The PortectionPolicy entry may need to be created
    
===Outlook 2013 on Windows 8.1 gives error 0x800CCC1A when sending over SMTP port 465===
 
===Outlook 2013 on Windows 8.1 gives error 0x800CCC1A when sending over SMTP port 465===
Line 978: Line 989:     
eg a disclaimer is added to internal to external messages but not internal to internal messages.
 
eg a disclaimer is added to internal to external messages but not internal to internal messages.
  −
There are also various switches that can be applied
  −
  −
(see http://bugs.contribs.org/show_bug.cgi?id=2648).
  −
      
To disable the disclaimer function for all domains on your sme server
 
To disable the disclaimer function for all domains on your sme server
Line 1,255: Line 1,261:  
  signal-event email-update
 
  signal-event email-update
 
  qpsmtpd-print-dns
 
  qpsmtpd-print-dns
 +
 +
=== Outbound DKIM signing / SPF / DMARC policy FOR MULTIPLE DOMAINS ===
 +
The default DKIM key is created in /home/e-smith/dkim_keys/default. To enable DKIM signing for all the domains that you manage:
 +
db configuration setprop qpsmtpd DKIMSigning enabled
 +
signal-event email-update
 +
If you want to disable dkim signing for a domain, you can use:
 +
db domains setprop domain.com DKIMSigning disabled
 +
signal-event email-update
 +
The default behavior is to use the same key pair for all your domains. But you can create other key pairs for specific domain if you want. For example, if you want to use a specific key pair for the domain.net domain:
 +
cd /home/e-smith/dkim_keys
 +
mkdir domain.net
 +
cd domain.net
 +
echo default > selector
 +
openssl genrsa -out private 2048
 +
openssl rsa -in private -out public -pubout
 +
chown qpsmtpd:qpsmtpd private
 +
chmod 400 private
 +
signal-event email-update
 +
Now, the emails using a domain.net sender address will be signed by this new key instead of the default one.
    
==Domain Keys==
 
==Domain Keys==
Line 1,586: Line 1,611:     
On the other hand, if no '';t=y'' is included, then it means you are intending to use DKIM in production mode. It might be a good idea to publish the DKIM DNS record first in testing mode ('';t=y'' included), check how things go and if everything is alright, remove the '';t=y'' part.
 
On the other hand, if no '';t=y'' is included, then it means you are intending to use DKIM in production mode. It might be a good idea to publish the DKIM DNS record first in testing mode ('';t=y'' included), check how things go and if everything is alright, remove the '';t=y'' part.
 +
 +
 +
==== Testing ====
 +
You can install spfquery:
 +
 +
yum --enablerepo=epel install libspf2 libspf2-progs
 +
 +
Usage (try -help for help):
 +
 +
spfquery -ip=11.22.33.44 -sender=user@aol.com -helo=spammer.tld
 +
 +
Check record via dig
 +
 +
dig -t TXT +short somedomain.co.uk
    
==== Load ====
 
==== Load ====

Navigation menu