1. Forum
  2. Fidonet
  3. SYNC SYSOPS

  • DKIM Support

    From Nigel Reed@1:103/705 to GitLab note in main/sbbs on Sun Mar 8 03:33:50 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8504

    BUMP!

    Some mail servers are rejecting emails from my BBS due to lack of DKIM. I had this issue on another system and it was pretty much immediately resolved with proper SPF+DKIM. In this day and age, it's becoming more of a requirement.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to GitLab note in main/sbbs on Sun Mar 8 04:30:52 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8505

    Do you have proper SPF support already? And that's not enough?
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nigel Reed@1:103/705 to GitLab note in main/sbbs on Sun Mar 8 04:36:15 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8506

    I do and all the mxtoolbox tests come back ok.

    ![image](/uploads/3b6776fd7739838eeffc19dcd18417c5/image.png){width=900 height=332}

    No, MS was rejecting stuff from my sysadmininc.com server and as soon as I properly configured DKIM it started getting delivered. SPF was already set.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Fernando Toledo@1:103/705 to GitLab note in main/sbbs on Mon Mar 9 06:13:52 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8519

    I agree with @nelgin; nowadays, SPF+DKIM is a kind of minimum standard for email servers.

    I think SBBs should support it. However, I believe it shouldn't be necessary for SBBs to handle it directly; it could be used, for example, through OpenDKIM. A possible alternative solution is to relay via Postfix and then sign with OpenDKIM.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nigel Reed@1:103/705 to GitLab note in main/sbbs on Mon Mar 9 07:52:13 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8520

    There is no point in having a mail server if you're just going to relay it off. I did ponder that but I'd rather fix it at the core.

    Yes, OpenDKIM long with OpenDMARC would be an ideal solution. It's not difficult to setup though it does get away from the "all in one" type of solution. I have no problem running them separately.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From deon@1:103/705 to Nigel Reed on Tue Mar 10 08:55:09 2026
    Re: DKIM Support
    By: Nigel Reed to GitLab note in main/sbbs on Mon Mar 09 2026 07:52 am

    Howdy,

    There is no point in having a mail server if you're just going to relay it off. I did ponder that but I'd rather fix it at the core.

    Its not uncommon that an inbound mail server frontends incoming mail before sending it to backend systems. That system can be the "last hop" in your network before going out to the world.

    I've been running mail that way for a long time, and Sync's mail is a part of that.

    IE: The inbound server rejects mail (spam) before getting to Sync, and Sync's mail goes out to it and signs it before it is released to the internet.


    ...����

    ---
    � Synchronet � AnsiTEX bringing back videotex but with ANSI
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to GitLab note in main/sbbs on Mon Mar 9 17:39:25 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8528

    This issue should be split into 2 separate feature requests:
    1. incoming DKIM validation
    2. outgoing DKIM support (signing?)

    These are separate efforts with separate justifications/rationale. We might do one and not the other.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to GitLab note in main/sbbs on Mon Mar 9 17:40:21 2026
    https://gitlab.synchro.net/main/sbbs/-/issues/215#note_8529

    All this said, mail.synchro.net does not use/support DKIM and I've yet to have any outbound mail rejected because of that. Are we sure this is a problem?
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)