1. Forum
  2. DOVE-Net
  3. Synchronet Sysops Only

  • DKIM Support

    From Nigel Reed@VERT to GitLab note in main/sbbs on Sunday, March 08, 2026 03:33:50
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8504

    BUMP!

    Some mail servers are rejecting emails from my BBS due to lack of DKIM. I had this issue on another system and it was pretty much immediately resolved with proper SPF+DKIM. In this day and age, it's becoming more of a requirement.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell@VERT to GitLab note in main/sbbs on Sunday, March 08, 2026 04:30:52
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8505

    Do you have proper SPF support already? And that's not enough?

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Nigel Reed@VERT to GitLab note in main/sbbs on Sunday, March 08, 2026 04:36:15
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8506

    I do and all the mxtoolbox tests come back ok.

    ![image](/uploads/3b6776fd7739838eeffc19dcd18417c5/image.png){width=900 height=332}

    No, MS was rejecting stuff from my sysadmininc.com server and as soon as I properly configured DKIM it started getting delivered. SPF was already set.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Fernando Toledo@VERT to GitLab note in main/sbbs on Monday, March 09, 2026 06:13:52
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8519

    I agree with @nelgin; nowadays, SPF+DKIM is a kind of minimum standard for email servers.

    I think SBBs should support it. However, I believe it shouldn't be necessary for SBBs to handle it directly; it could be used, for example, through OpenDKIM. A possible alternative solution is to relay via Postfix and then sign with OpenDKIM.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Nigel Reed@VERT to GitLab note in main/sbbs on Monday, March 09, 2026 07:52:13
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8520

    There is no point in having a mail server if you're just going to relay it off. I did ponder that but I'd rather fix it at the core.

    Yes, OpenDKIM long with OpenDMARC would be an ideal solution. It's not difficult to setup though it does get away from the "all in one" type of solution. I have no problem running them separately.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From deon@VERT/ALTERANT to Nigel Reed on Tuesday, March 10, 2026 08:55:09
    Re: DKIM Support
    By: Nigel Reed to GitLab note in main/sbbs on Mon Mar 09 2026 07:52 am

    Howdy,

    There is no point in having a mail server if you're just going to relay it off. I did ponder that but I'd rather fix it at the core.

    Its not uncommon that an inbound mail server frontends incoming mail before sending it to backend systems. That system can be the "last hop" in your network before going out to the world.

    I've been running mail that way for a long time, and Sync's mail is a part of that.

    IE: The inbound server rejects mail (spam) before getting to Sync, and Sync's mail goes out to it and signs it before it is released to the internet.


    ...ëîåï

    ---
    þ Synchronet þ AnsiTEX bringing back videotex but with ANSI
  • From Rob Swindell@VERT to GitLab note in main/sbbs on Monday, March 09, 2026 17:39:25
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8528

    This issue should be split into 2 separate feature requests:
    1. incoming DKIM validation
    2. outgoing DKIM support (signing?)

    These are separate efforts with separate justifications/rationale. We might do one and not the other.

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell@VERT to GitLab note in main/sbbs on Monday, March 09, 2026 17:40:21
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8529

    All this said, mail.synchro.net does not use/support DKIM and I've yet to have any outbound mail rejected because of that. Are we sure this is a problem?

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net