Article ID: 6005, created on Feb 3, 2009, last review on Aug 12, 2014

  • Applies to:
  • Plesk 9.0 for Linux/Unix
  • Plesk 8.x for Linux/Unix

Symptoms

Mail messages sent from Domain Aliases are not signed with DomainKeys.

The message header looks like the following:

DomainKey-Status: no signature
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on MAIL.DOMAIN.TLD
X-Spam-Level:
X-Spam-Status: No, score=-0.2 required=4.0 tests=AWL,BAYES_00,TVD_SPACE_RATIO autolearn=no version=3.2.3
DomainKey-Status: no signature
Received: (qmail 10133 invoked from network); 30 Jan 2009 16:30:24 +0100
Received: from MX.SENDER.DOMAIN.TLD (123.123.123.123) by MAIL.DOMAIN.TLD with SMTP; 30 Jan 2009 16:30:24 +0100
Received-SPF: pass (MAIL.DOMAIN.TLD: SPF record at SENDER.DOMAIN.TLD designates 123.123.123.123 as permitted sender)
Received: (qmail 19918 invoked from network); 30 Jan 2009 16:30:24 +0100

Resolution

The feature will be implemented in future update of Parallels Plesk Panel: when DomainKey was enabled all messages sent from Domain Alias are signed with DomainKey.
Currently it is recommended to enable the feature for Domain Alias manually.

For Parallels Plesk Panel version 9.0 create the handler manually. You may use the following command:

~# $PRODUCT_ROOT_D/admin/bin/mailmng --add-handler --handler-name="dd51-domainkeys"
--handler-type="sender-domain" --handler-type-name=<alias_name> --priority=10 --context="signer"
--hook="before-remote" --executable="$PRODUCT_ROOT_D/handlers/hooks/dk_sign"

The step is not required for Parallels Plesk Panel version 8.x, just skip it.

For Parallels Plesk Panel versions 8.x and 9.0 copy the private key from Domain to Domain Alias:

~# cp -rp /etc/domainkeys/<domain_name> /etc/domainkeys/<alias_name>

Where <alias_name> is the domain alias from which messages are sent.
And <domain_name> is the parent domain with enabled DomainKeys spam protection system.
Option -r is to copy the directory recursively, option -p is to preserve ownership and permissions.


NOTE: Verify that DomainKeys spam protection is enabled on server-wide and domain mail preferences.
For Parallels Plesk Panel version 8.x {Server -> Mail -> DomainKeys spam protection} and {Domains -> <domain_name> -> Mail -> Preferences -> Use DomainKeys spam protection system to sign outgoing e-mail messages}. For Parallels Plesk Panel version 9.x {Home -> Mail Server Settings -> DomainKeys spam protection} and {Domains -> <domain_name> -> Mail Accounts -> Mail Settings -> Use DomainKeys spam protection system to sign outgoing e-mail messages}

4f57df935e9acf8d18830757d2346419 a914db3fdc7a53ddcfd1b2db8f5a1b9c 29d1e90fd304f01e6420fbe60f66f838 6ef0db7f1685482449634a455d77d3f4 b8ef5052d936e902043e41759118114e 56797cefb1efc9130f7c48a7d1db0f0c

Email subscription for changes to this article
Save as PDF