problems with dkim-milter and mailscanner/postfix

[Paul Hutchings]

I'm trying to get our smtp relay to sign outgoing email with
dkim-milter.

I've followed
http://www.howtoforge.net/postfix-dkim-with-dkim-milter-centos5.1 and
things are loosely working, however:

Incoming messages appear to be getting stuck in the hold queue (nothing
obvious other than the queueid! when you run mailq).  When this happens
it also appears that the MailScanner processes go a bit ape and top
shows them using all CPU.

I'm also seeing some errors on inbound mail from gmail (me testing by
emailing myself) along the lines of:

Apr 20 20:58:10 relay dkim-filter[1481]: ED0091FDA4 SSL
error:04067069:rsa routines:RSA_EAY_PUBLIC_DECRYPT:pkcs1 padding too
short
Apr 20 20:59:01 relay dkim-filter[1481]: 7AB011FDD2 SSL
error:04067069:rsa routines:RSA_EAY_PUBLIC_DECRYPT:pkcs1 padding too
short
Apr 20 21:08:23 relay dkim-filter[1481]: 545E01FD9F SSL
error:04067069:rsa routines:RSA_EAY_PUBLIC_DECRYPT:pkcs1 padding too
short
Apr 20 21:13:02 relay dkim-filter[1481]: D5A631FD9F SSL
error:04067069:rsa routines:RSA_EAY_PUBLIC_DECRYPT:pkcs1 padding too
short; error:04077068:rsa routines:RSA_verify:bad signature
Apr 20 21:13:02 relay dkim-filter[1481]: D5A631FD9F: bad signature data

Whilst this would appear to be a dkim-filter error I wasn't sure if it
might be relevant to the other problem?

It seems that if I remove the lines from main.cf that invoke the dkim
milter everything is perfectly fine as before.

I'm a little lost as to what and where to start and would appreciate any
pointers.  Suffice to say I have no real preference what I use I'd just
like our smtp relay to be able to use DKIM signatures on outbound email
from our primary domain name.

TIA,
Paul

Paul Hutchings
Network Administrator, MIRA Ltd.
Tel: 44 (0)24 7635 5378
Fax: 44 (0)24 7635 8378
mailto:paul.hutchings at mira.co.uk



-- 
MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England.

Registered in England and Wales No. 402570
VAT Registration  GB 114 5409 96

The contents of this e-mail are confidential and are solely for the use of the intended recipient.
If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax.
You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.