Add support for DKIM ("DomainKeys Identified Mail")

[k-planethost]

Keith and Mary from cpanel team paste me this link
as long as i check their exim build does include Experimental_DKIM enabled.

root@delta [~]# /usr/sbin/exim -dd | grep Experimental
Support for: crypteq iconv() IPv6 PAM Perl OpenSSL Content_Scanning Old_Demime Experimental_SPF Experimental_SRS Experimental_DomainKeys Experimental_DKIM
the issues that i see is when when cPanel/WHM rebuilds exim, the edits to the exim.conf may be wiped out. You will want to create a backup copy of your edited exim.conf. Then you can create a script (bash/perl/etc) at /scripts/postupcp to copy your custom config back after a cPanel upcp is run.
on line 4 dkim_domain=your_domain_name.com there i think i have to compete all the domains off the server.
personally i havent try yet cause all the boxes are blacklisted and yahoo paste me useless answers improve your email settings etc

[mykkal]

DKIM in version 4.69 has features that were deprecated as DKIM was still in beta and domain keys was standard at the time.

I appreciate the sharing but who wants beta technology 4 years after the release of the stable one?

Next....

Keith and Mary from cpanel team paste me this link
as long as i check their exim build does include Experimental_DKIM enabled.

root@delta [~]# /usr/sbin/exim -dd | grep Experimental
Support for: crypteq iconv() IPv6 PAM Perl OpenSSL Content_Scanning Old_Demime Experimental_SPF Experimental_SRS Experimental_DomainKeys Experimental_DKIM
the issues that i see is when when cPanel/WHM rebuilds exim, the edits to the exim.conf may be wiped out. You will want to create a backup copy of your edited exim.conf. Then you can create a script (bash/perl/etc) at /scripts/postupcp to copy your custom config back after a cPanel upcp is run.
on line 4 dkim_domain=your_domain_name.com there i think i have to compete all the domains off the server.
personally i havent try yet cause all the boxes are blacklisted and yahoo paste me useless answers improve your email settings etc

[mykkal]

I just want to make one more strong point. DKIM is much more reliable then SPF checking. It is also just as quick. There would be no performance drag by enabling DKIM authentication for incoming mail.

With that being said I want to make sure that CPANEL understands that we need the ability to authenticate incoming mail via DKIM as well as SPF. Being able to send out a DKIM signature is great but what is the point when most spam & spoofed email is received by private servers being run by individuals with hobbies, or small & medium sized businesses. Thats CPANELS entire customer base.

We've said we need the complete DKIM functionality. So please... I'm begging you guys not to let corporate politics 'Half-ass' this project us after five years of waiting.

If I just get basic functionality I will really be compelled to sink the CPANEL ship within my organization and move to a control panel that provides full implementation.

Lets just do it right from the beginning. Time isn't an excuse now... nor is manpower. Get it done.

[kran]

All my servers are now bloked by yahoo because DKIM funcionallity

[sardelich]

Although I never got a complain from a customer about yahoo mail,I just would like to check one thing.Yahoo mail service is the only service in the world that demands DKIM for mail delivery? Since I never heard of any other free/paid/hosted mail solution that requires this.so...

[mykkal]

Although I never got a complain from a customer about yahoo mail,I just would like to check one thing.Yahoo mail service is the only service in the world that demands DKIM for mail delivery? Since I never heard of any other free/paid/hosted mail solution that requires this.so...

True and untrue. AOL only supports DKIM for authentication (No spf). Excite and lycos are the same way along with netscape mail.

Basically you don't have to have it but without having a supported email authentication method for these networks all bulk mail or traffic that goes over the rate limit will be deffered. And... since these networks only support DKIM all cpanel users are at their mercy for the moment.

Yahoo! has deprecated domain keys already but still accepts it because that was their original standard. DKIM is the evolution of domain keys but it is implemented as a standard by a larger buody...not just Yahoo!

I would imagine that yahoo will drop support at some point. DKIM is such a big improvement and much more reliable/stable.

[NovemberRain]

I had opened a ticket about dkim support and server being blocked by yahoo. They suggested me using a third party service like google aps. I can't believe this. If I told my customers to use third party services they would say "then why are we paying you?"

Improvements to cpanel/whm are surely important. But basic functionality must be top priorty. They should have fixed this long time ago instead of working on other things. This is business about web and email services and email services don't work as they supposed to. This is what customers care about. Everything else is useless if you can't provide these services efficiently. Simple as that.

[Infopro]

Lots of good tips on avoiding being blocked here:
ServerTune KnowledgeTune / Tips to avoid getting your server blocked by Hotmail/Yahoo/Gmail

[dreas]

Did anyone already try to just add DKIM signing support directly in Exim themselves? Our antispam products are based on Exim and facilitate exactly this functionality for our cPanel clients (outgoing and incoming), I'd be happy to see if we can provide a custom Exim cPanel configuration that provides the requested functionality (for free to non-clients). I don't see why that would technically not be possible? Please PM me if you don't mind giving us root access to see if we can get that setup and post it here if it works.

[jdfalk]

Um...that doesn't make any sense. DomainKeys was deprecated years ago. DKIM signing is for outbound mail, and DKIM verification is for inbound mail.

However, DKIM signing does not guarantee inbox placement at Yahoo! -- they look at lots of other stuff, too.

We've got lots of good information about DKIM and authentication in general at The Received Blog.

[mykkal]

I was told by cpanel that upgrading would void our warranty.

Did anyone already try to just add DKIM signing support directly in Exim themselves? Our antispam products are based on Exim and facilitate exactly this functionality for our cPanel clients (outgoing and incoming), I'd be happy to see if we can provide a custom Exim cPanel configuration that provides the requested functionality (for free to non-clients). I don't see why that would technically not be possible? Please PM me if you don't mind giving us root access to see if we can get that setup and post it here if it works.

[cPanelDavidG]

I was told by cpanel that upgrading would void our warranty.

To elaborate, the only support issue that would arise is if there was an issue that was traced back to use of an unsupported Exim version/compilation then we may not provide assistance for that specific issue.

[mykkal]

Lets be honest David. Cause I don't think anyone appreaciations 'spin'... Every case where DKIM is installed will void your warranty with Cpanel. Because using DKIM properly requires upgrading Exim (which Cpanel is 5 years behind on). Even the experimental DKIM and domain keys in exim 4.69 is deprecated. Worse yet... it is a simple technology.

So there is NO situation where cpanel will support or help with DKIM. I have the tickets and the communications to prove it. (some from just two weeks ago.)

Btw, we've migrated 5 of 8 enterprise level servers off cpanel. You guys are draggin tail still and its just bad business for me and the growth of the companies I support. I should also mention cpanel's competitors were very happy to move us over and support our use of DKIM. They are getting a lot of business from cpanel being so technically immature

They might send you a card.

I'm not saying this to rub it in but rather to let you know that 5 years of patience has run out and with this thread having so many thousands of comments, views, and backlinks... You're going to lose more marketshare.

To elaborate, the only support issue that would arise is if there was an issue that was traced back to use of an unsupported Exim version/compilation then we may not provide assistance for that specific issue.

[cPanelDavidG]

So there is NO situation where cpanel will support or help with DKIM. I have the tickets and the communications to prove it. (some from just two weeks ago.)

Given current circumstances, that is correct.

B]Every case where DKIM is installed will void your warranty with Cpanel.[/B]

This statement just incites FUD with its inaccuracy. If you had a problem with DNS and it was caused by BIND or NSD not being up, we would still investigate why the nameserver was malfunctioning and, if the issue wasn't traced back to your custom version of Exim (seemingly unlikely in this scenario), correct that issue.

[cPanelDavidG]

Given that this thread has gone in many circles for many months now and no further productive discussion seems likely, this thread will be closed until this feature is implemented.