DKIM setup

Hi all,
I'm doing some research in how to setup DKIM for the company I work for. We are an email service provider and we use two c350d appliances (AsyncOS for Email Security 7.0) to sent out bulk email (permission based, opt in) for our clients. My question is about a 'DKIM for ESP configuration'. Hope you can point me in a good direction.
I have a few clients for who we setup DKIM to sign message headers and this works fine. But, it's a big operation to get all (about 300) of our clients to have them place a txt record into their DNS and also it's hard to join feedback loops who require DKIM to join. For every client we need to set it up.
So, I've looked around and read some articles, and I think we can sign our outbound messages and use the domain of our Return-path.
Any idea how to set this up using the domain profiles?
This is an example I found in my inbox from one of our appreciated fellow esp colleagues, and I hope we can do this too:
Delivered-To: [email protected]
Received: by 10.216.172.143 with SMTP id t15cs126974wel;
        Wed, 28 Apr 2010 06:04:34 -0700 (PDT)
Received: by 10.216.88.148 with SMTP id a20mr4793541wef.124.1272459873705;
        Wed, 28 Apr 2010 06:04:33 -0700 (PDT)
Return-Path: <[email protected]>
Received: from xxx (mta010.esp.com [xxx.xxxx.xxx])
        by mx.google.com with ESMTP id z13si5329866wbd.37.2010.04.28.06.04.32;
        Wed, 28 Apr 2010 06:04:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates xxx.xxx.xxx.xxx as permitted sender) client-ip=194.88.231.10;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates xxx.xxx.xxx.xxx as permitted sender) smtp.mail=; [email protected]
dkim=pass [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; s=sel001; d=esp.com;
h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=rwshpxhHZOePhXOvJDYH8zWYlvIsfdKi3kCVtyB8SdQ=;
b=NV8afpND2eF1ErfPUOmxcU3IiGlADAIIB05gcB3DaYLSrcyx09njubEM9Y6Tht4OoV2RXdHG9a+e
   LJ+kk9hCjNEs1zFdnhpkp+qkRmhJPhpiaw6CJfU0bytSqG84UBdEEeWJNG/fTqvnMCw
   mhdT3uCxxnyAJVpvrEg=
Date: Wed, 28 Apr 2010 15:04:32 +0200 (CEST)
From: Client Name <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <5018521.500941272459872412.JavaMail.mail@smtphost>
Subject: Hope you can help me
When I setup a domain profile for our bounce domain, I cannot have users from a different 'From' domain attached to the profile. This keeps the mail sent out by our clients from being signed.
Thank you, hope I made this a little bit to understand for you guys.
Wouter

mykey._domainkey.mysubdomain.mydomain.net. IN TXT "k=rsa; t=y; p=<hash>"
If you mean you want to apply your key to a wildcard, it seems that isn't valid:
http://tools.ietf.org/html/rfc5617#section-6.3

Similar Messages

What's wrong with this DKIM?

I have a server setup with a popular open source MTA and DKIM, the messages it signs pass the tests at yahoo, gmail, port25 and unlock theinbox, so I am fairly sure that they are being signed correctly. howevwer
I have one user complaining about seeing this text:
In this email, a DKIM key was supplied in the email and the DKIM cryptographic
authentication has failed (with 100% certainty). Due to this, you should not
necessarily trust that it was really sent from the domain stated by the sender
and that appears to be generated by ironport (am i right here?)
I'm also seeing an added "X-IronPort-RCPT-TO:" header.
and there is only one new recieved header (names and IPs changed to protect the innocent)
Received: from my.server.invalid ([999.999.999.999])
    by ironport1.their.domain.invalid with ESMTP/TLS/AES256-SHA; 08 Feb 2012 13:40:30 -0500
the signature looked much like this:
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=my.domain.invalid; s=main;
        h=Date:Message-Id:To:Subject:From; bh=+BKVDLbyMrnqhPqdKKvfUBn8/mXd/G8QDWbkPFJnisw=;
       b=OD0b3+rnOcKMNMvd4/UWzqA2uwMr5TmYON+U2OSK+4a1VjHlYY5vdE0gaw0m3PRtjuRDGA7jLmO65oPEbert88n/pVfoUe1tIMEMzjLLk4B+lX4Rz+pIOxtfkzG0i049
is there anything obviously wrong with that?
none of the headers which were subject to the DKIM signature appear to have been altered
I am also concerned by the text in the error:
"you should not necessarily trust that it was really sent from the domain stated by the sender"
even if it passed the DKIM test (which in my opinion it should have) that should not be a reason to conclude that the
domain claimed by the sender is correct without there being further evidence to support that.

no, received headers had the signing server immediately before the system which rejected the signatire.
(reading, in chronological order, upwards)
I don't have the original emai on record only the size (2881 bytes when it arrived)
and the copy that was marked bad. after editing out the received herader, ironport headers and the headers our system added prior to signing it I get 2940 but several line breaks appear to have been added between
it's intended recipient and me.
someone else told me that the DKIM header had a semicolon on the and they considered this to be unusual
I was surprised by that claim, did a little research and found that RFC4871 explicitly allows that
(start at "tag-list", top of page 10).
The semicolon in my post above seems to have got lost during my struggle with an unfamiliar editor
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mydomain.invalid; s=main;
     h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:Subject:To:From;
     bh=+BKVDLbyMrnqhPqdKKvfUBn8/mXd/G8QDWbkPFJnisw=;
     b=OD0b3+rnOcKMNMvd4/UWzqA2uwMr5TmYON+U2OSK+4a1VjHlYY5vdE0gaw0m3PRtjuRDGA7jLmO65oPEbert88n/pVfoUe1tIMEMzjLLk4B+lX4Rz+pIOxtfkzG0i049;
the destination mx identified itself as
220 ironport1.SOMEDOMAIN.net ESMTP
and responds to EHLO with
250-ironport1.SOMEDOMAIN.net
250-8BITMIME
250-SIZE 20971520
250 STARTTLS
(uppercase/italic part of domain name has been edited)
so I appear to have a direct connection from the smarthost (where the DKIM is done) to an MX
that somebody has labeled as 'ironport1' I don't know if that EHLO response is typical of this hardware
or not. it looks like a directo connection to me, I have no reason to believe that is is not.
Not having easy access to both sides of an ironport, is there a way I can test this?
If I gave you an smtp account on the server would that help?

How to configure DomainKey/DKIM in Mavericks Server?

I tried to follow the guid from TopicDesk (http://http://topicdesk.com/downloads/tutorials/160-implementing-domainkeys-dkim -on-os-x-10-8-x-mountain-lion-with-server-2-x) on 10.9.
My DNS is setup correctly (tested using the testing tools at domainkeys.sourceforge.net) and all is tested good.
I test that everything is registered correctly on the server with:
sudo -u _amavisd -H amavisd -c /Library/Server/Mail/Config/amavisd/amavisd.conf testkeys
and it passes, and I can successfully extract my public key with:
sudo -u _amavisd -H amavisd -c /Library/Server/Mail/Config/amavisd/amavisd.conf showkeys
When I receive signed messages, I can see the headers, but when I send email, I don't see any evidence that my email was signed by DKIM process.
how can I troubleshoot this an verify that amavisd is configured correctly?
I wonder also if the topicdesk.com article is incomplete.
Any help would be much appreciated!

Sorry for not getting back to you. Yes, I too had to do the full implementation. this is because the second listener is used.
I already had this in my amavisd.conf
$interface_policy{'10026'} = 'ORIGINATING';
I did not add an new policy_bank, but I did change the order around a bit from the default.
$policy_bank{'ORIGINATING'} = { # mail supposedly originating from our users
originating => 1, # declare that mail was submitted by our smtp client
bypass_spam_checks_maps => [1],
allow_disclaimers => 1, # enables disclaimer insertion if available
# notify administrator of locally originating malware
virus_admin_maps => ["virusalert\@$mydomain"],
spam_admin_maps => ["virusalert\@$mydomain"],
warnbadhsender   => 1,
# force MTA conversion to 7-bit (e.g. before DKIM signing)
smtpd_discard_ehlo_keywords => ['8BITMIME'],
# forward to a smtpd service providing DKIM signing service
forward_method => 'smtp:[127.0.0.1]:10027',
# Other special treatment of locally originating mail
bypass_banned_checks_maps => [1], # allow sending any file names and types
terminate_dsn_on_notify_success => 0, # don't remove NOTIFY=SUCCESS option
Even though the amavd.conf was already setup mostly correct, and expected port 10027 for the originating poicy_bank, postfix was not configured with a listenning channel on port 10027, so I added one (per the topicdesk example) by adding this to my master.cf:
127.0.0.1:10027 inet n -       y       -       -       smtpd
   -o content_filter=
   -o smtpd_tls_security_level=none
   -o smtpd_delay_reject=no
   -o smtpd_client_restrictions=permit_mynetworks,reject
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_data_restrictions=reject_unauth_pipelining
   -o smtpd_end_of_data_restrictions=
   -o smtpd_restriction_classes=
   -o mynetworks=127.0.0.0/8
   -o smtpd_error_sleep_time=0
   -o smtpd_soft_error_limit=1001
   -o smtpd_hard_error_limit=1000
   -o smtpd_client_connection_count_limit=0
   -o smtpd_client_connection_rate_limit=0
   -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_m ilters
   -o local_header_rewrite_clients=
   -o smtpd_milters=
   -o local_recipient_maps=
   -o relay_recipient_maps=
But really, all of this is in the topicdesk blog. The key was you have to do a full implementation, you cannot stop where they suggest you can stop.

Exchange 2013 and DKIM

Exchange 2013 SP1 with 1 DAG and 2 members. We are thinking about using DKIM:
http://www.emailarchitect.net/webapp/download/eaexchdomainkeys.exe
First, is this the recommended DKIM app to use or is there a different/better one? Second, we host many domains on our exchange servers. Is it possible to use DKIM with many domains? Third, if we use DKIM do we need to install DKIM on both exchange servers?
Both servers have all roles installed.

Hello, as recommended
earlier on the use DKIM in EDGE Exchange 2013 or 3rd party GW (Li Zhen)
DKIM Exchange
Server 2007/2010/2013
DKIM
Wizard
dkim-exchange
MCITP, MCSE.
Regards, Oleg
That top link is the same link i originally asked about. We may be able to do a hyper-v VM for edge server. Can this be done with an existing exchange install/setup?

How can I setup a mail-specific passcode/restriction on iPad used by multiple family members?

How can I setup a mail-specific passcode/restriction on iPad used by multiple family members?
Have an Exchange mail account setup and accessible in my mail on iPad... however my kids use it and i would like to restrict them from accessing this specific portion of the device. I tried viewing restriction options and do not see that i can apply a restriction specifically to Mail. Thanks for your help.

Not a feature of iOS. Check the AppStore to see if there are other
mail apps that allow passcode protection.
Or use Safari to log onto your email via a web-based interface and
enter your credentials each time. A bit slower, but the kids will
not know the details to login.

New setup questions...

Hey Guys,
I'm moving to a new condo on 9/1 and getting Fios (switching from cable) for the first time. In the proverbial nutshell, what I want to do is this: run two HD TiVos (with cablecards), plus my Apple Time Capsule as my primary router. I don't care a bit about VOD or Verizon's channel guides, email, or any other silly thing they provide. An ISP is (or ought to be) just a 'dumb pipe'.
Having done some research online today, it seems as though I need to have my ONT set up to run Ethernet, not MOCA (coax). Is there anything else I've missed that I need to know?
Thanks! Any suggestions greatly appreciated... :-)
Regards,
Ken

You would want to have a CAT5 Cable run from the location where the ONT will be to where your Apple Router will be locatated.
Allow the FIOS Technician to install their Router and get everything up and running. Since you are not planning on using the Verizon Router the location should not mater. I would just have a CAT5 Patch cable available and ask them to use it to make the data conenction from the ONT to the Verizon Router.
Once the technician is done you can release the TCP/IP Address from teh Verizon Router, Power Down, Swap in your Router, and hopefully be all setup. Here is a FAQ with more information on using different routers:
http://www.dslreports.com/faq/verizonfios/3.0_Networking
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it.
If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

I am trying to setup VPN with QuickVPN

Hi I am trying to setup VPN with WRVS4400N and Quick VPN on client side. I am fairly new to VPN and did some research and looked through the manual but can't seem to get it to work so far and from what I noticed many people are having this problem. So hopefully someone can tell what the problem is or at least point to right direction on solving this.
Basically it gives the "Failed to establish connection" generic error, shows it almost instantly..
It also showed the certificate error before but then I read about putting it in the installation directory and it stopped showing it, and whats strange is later I removed it but it doesnt show the error any longer, so don't know if its caching it somewhere or what can be going on...
In effort to look for answer and test things out I tried to connect to another location and setup a WRV200 router, I also get the same error but not instantly, it even shows "Activating Policy" but then doesn't go farther and shows the generic error...
Also with this setup strangly it always shows the certificate error, no matter if I put one in directory or not... Even tried to name it as the WRVS4400N certificate name...
Anyway VPN IPSec is disabled, and Client Accounts are configured and changed password several times to make sure its correct, VPN Passthrough enabled on all 3 options.
I tried to disable Windows Router, I also have a router in place do I possibly need to open some type of ports for the QuickVPN client?
Don't know yet whats going on if I am missing something or if there is some problem that needs work-around but if you know the answer or guesses of answer please let me know.

Hi Aleksandr,
since this question is about a product in the Cisco Small Business / Linksys range, I suggest you move it to the community, where you will have a better chance of getting expert advice.
best regards,
Herbert
Cisco Moderator

Add management server: Setup version: 7.0.9538.0 is not compatible with database version: 7.1.10226.0

I want to add another management server to our existing SCOM environment. But whenever I run this setup on a new server I get stuck in the window for selecting the OperationsManager database. The database field stays blank and in the OpsMgrSetupWizard log
there are lines that the setup version is not compatible with the database version. But I use the same installer as when I installed the other management servers a year ago.
Maybe there is a newer setup installer? But I can't find it.
[10:42:54]: Error:
:Error:setup version: 7.0.9538.0 is not compatible with database version: 7.1.10226.0
[10:42:54]: Info:
:Info:Using DB command timeout = 1800 seconds.
[10:42:54]: Info:
:Info:isOMDatabase: Read returned true. so far, this is OM DB, not an empty DB
[10:42:54]: Debug:
:Connection was not open. We will try to open it.
[10:42:54]: Debug:
:SqlConnectionReady returned True.
[10:42:54]: Info:
:Info:Using DB command timeout = 1800 seconds.
[10:42:54]: Info:
:Info:isOMDatabase: Read did not return true. The MG is missing. This is not OM DB
[10:42:54]: Info:
:Info:Using DB command timeout = 1800 seconds.
[10:42:54]: Always:
:Azman store table not found in OperationsManagerDW table, assuming this is an not a valid OMDB for empty DB scenario.
[10:42:54]: Info:
:Info:DatabaseConfigurationPage: DB connection attempt completed.
[10:42:54]: Info:
:Info:DatabaseConfigurationPage: DB connection attempt completed.

Never mind, found it!
Apparently there was a newer version of SCOM setup in msdn and someone upgraded our existing SCOM environment. Downloaded the new setup, new report viewer controls and a System
CLR Types for Microsoft® SQL Server® 2012 and now it works!!

Can we setup two sets different 7912 logos in one CCM cluster?

Hi,
CCM 4.1(3) cluster within head office. We created the 7912 logo for system default image. However, the remote site 7912 phones, need to use a different logo other than the head office.
as per http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=IP%20Telephony&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddc5d3d/0#selected_message
We can create the 7912 logo, but how can we setup two or more different 7912 logos for different sites?
We noticed on CCM4.1(3), there is idle URL for 7912 phone, what is the callmanager default link for this URL? I am thinking to use different logo file names, and put the related URL on this parameters for remote site 7912 phones.
Could someone let me know or any other better way to do?
Thanks,
JJ

Hi JJ,
This should work just the way you have described. Have a look;
Idle
Enter the URL that displays on the Cisco IP Phone display when the phone has not been used for the time that is specified in Idle Timer field. For example, you can display a logo on the LCD when the phone has not been used for 5 minutes.
Leave this field blank to accept the default setting.
Idle Timer (seconds)
Enter the time (in seconds) that you want to elapse before the URL that is specified in the Idle field displays.
Leave this field blank to accept the value of the Idle URL Timer enterprise parameter.
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00801ecfc7.html#1121361
Here how on CCM;
Method 1:
Choose System > Enterprise Parameters so that the change is propagated to all of the phones from the Cisco CallManager Administration page.
In the URL Idle field, enter http://IP_address_of_CallManager/CCMCIP/filename.xml.
In the URL Idle Time field, enter any positive value in seconds.
Method 2:
Choose Device > Phone under the Cisco IP Phone configuration so that only this phone displays the graphics from the Cisco CallManager Administrator page.
Choose the phone/phones on which you want to put the display.
In the Idle field, enter the path http://IP_address_of_CallManager/CCMCIP/filename.xml.
In the Idle Timer field, enter any positive value in seconds.
From this good doc;
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00801c0764.shtml#topic4
Hope this helps!
Rob

HT4557 whats the best itunes/appleID setup for family of 3 with 3 ipads, 3 iphones, one PC with all music on. if we use 3 separate ones how do we share purchased and home content?

been with apple for years. one itunes/appleID in use for family - all purchases and downloads on the one account..
now got 3 ipads, 3 iphones and when we update the software, we seem to get text/facetime issues due to multiple email addresses and phone numbers for the different devices that each individual uses. For example, I send a text and it appears to have come from my wife or son to the recipient. Not good !
there seems to be direction from apple that each of us should use our own apple id, thogh how do I link the accounts so enable family sharing of music/media we have purchased etc - Id also like to be able to review and keep a private eye on what my son downloads as he is 11 yrs old ! I manage this currently as we allow him access to the password for itunes (as we all use the same id today)
Am i better setting up accounts for my wife and son independent of my own, or not. Each of us would like access to the family content we have and the master library of synced content. I just want the most simplistic approach that apple, or others would recommend.
Is there a better or optimum setup for a family as we cannot be alone.....

Thanks for the help, but a follow up question now.
My iPhone won't arrive for a little while, but my wife already got hers and she wants to set it up now. Using my Apple ID for the purchases, if she starts setting hers up, can she change her iCloud ID to something else quickly? It keeps telling us that we have to sign in with the AppleID first.
Should we just set up an iCloud account via normal internet before trying all this via iPhone?

MULTIPLE DEVICES SETUP IN ITUNES, SAME APPLE ID

We have one home computer (with Windows), and have 2 IPOD Touch's plus 1 IPAD all setup in ITUNES on this same computer. We are also setup with ICLOUD.
Kids IPOD's get music and FACETIME contacts all mixed up with each other and with the IPAD. What is the best way to keep each other's music/playlists as well as FACETIME contacts from syncing to each other's devices?

Please test after each of the following steps that you haven't already tried. Stop when the problem is resolved. Back up all data before making any changes. Keep in mind that no one here represents Apple or can help with customer-service issues.
Step 1
A purchased app can only be updated by signing in to the App Store with the same Apple ID that was originally used to buy it. There's no way around that limitation, which also applies to free apps. If you can't sign in with the buyer's ID, delete the app and reinstall it. You'll have to pay for it again, if applicable.
Step 2
If you get the alert when trying to update a bundled iLife app, select the Purchases page in the App Store and locate the app in your purchase history. If there's a button marked ACCEPT on the right, click it.
If you have a used Mac, the bundled apps were linked to the original owner's Apple ID and can't be transferred to you. Reportedly, customer service has issued redemption codes to some second owners who asked, but it's not guaranteed.
Step 3
If you're trying to update iLife or iWork apps that were installed from a purchased DVD, or if you have a refurbished Mac bought directly from Apple, contact App Store customer service for a redemption code. You may be asked for the part number of the DVD.
Step 4
From the App Store menu bar, select
Store ▹ View My Account
Enter your Apple ID password at the prompt. At the lower right corner of the window that opens, click the Reset button. Close the window.
Step 5
According to a report, the error can result from changing the language setting of your Apple ID account. I can't confirm.

How do I use family share to setup a new device for my child when I don't already have one with iOS 8?

My kids want apple products.
I don't own any.
I buy an iPad for one and an iPhone for the other, but I can't set them up because they require me to setup Family Share and create accounts. I can't do that because I don't have a device with iOS 8 already setup.
I do have a valid AppleID. I've had it for years. I use it with iTunes.
I wish they would just let me manage the account setup and Family Share through a web page. Right now I'm dead in the water and Christmas is approaching fast.

I have found a solution.
It turns out that all the documentation I could find on the web was wrong. At least in the case of the iPad I just bought. I did manage to borrow a device so that I could setup family share and the kids accounts, but when I went to enter the new existing account into the setup of the iPad, it then started leading me through the process to create the account (clearly it didn't bother to check if it really existed already). In reality, I believe had I just entered a "new ID" for my child, that didn't exist, it would have led me through the same process. As it was, I had to back out to the first screen and skip the creation process, since I had already created the IDs elsewhere.
The only part I'm not clear on, is if I still would first have needed to turn on family sharing for my ID before starting this whole process, or whether it would automate that while creating the child AppleID.

I need help with proper DNS setup for 10.5.8 Server

I'm administering a 10.5.8 server that I sold and setup about a year ago. I'm experiencing issues with getting iCal server to be happy. All of the clients are running 10.5.8, but I'm running 10.6.1. I've heard from others that connecting iCal in 10.6 to a 10.5 iCal Server should be no problem.
I'm beginning to think that I have DNS issues. Probably because I'm not and never have been 100% certain how to set it up completely correctly. I used to be able to get Kerberos tickets, but now I can't. With the new "Ticket Viewer" in 10.6, it asks for two bits of information. First is "Identity" where I'm guessing I should put [email protected] and then password. When I do this I get an alert dialog that says "Kerberos Error -- cannot resolve network address for KDC in realm example.com"
The server is a Mac Pro tower with two Ethernet ports. En2 is connected directly to the Internet and has a static IP with a domain name assigned to it. We'll call it "example.com" for the purposes of the discussion. The En1 is connected to the network switch and has a static LAN IP of 192.168.1.250. All clients inside and outside are able to reach the server via domain name for WWW & AFP, no problem.
nslookup on the static IP address returns "example.com" and nslookup on "example.com" returns the correct static IP address. Open Directory is running and happy including Kerberos. The LDAP search base is "dc=example,dc=com". The LDAP search base is a concept I haven't quite grasped, so I'm just going to assume it's correct.
The domain name is hosted outside by a service provider that forwards all "example.com" requests to the server with the exception of mail.
In DNS, I have three "sections" that look like this:
Name Type Value
1.168.192.in-addr.arpa. Reverse Zone -
192.168.1.250 Reverse Mapping example.com.
000.000.00.in-addr.arpa. Reverse Zone -
000.000.000.000 Reverse Mapping example.com.
com. Primary Zone -
mail.example.com. Alias mail.our-email-isp.com.
example.com. Machine Multiple values
www.example.com. Machine Multiple values
NOTE: the zeros aren't actually zeros, they are the static IP assigned to the server/domain
When I select the top element "1.168.192.in-addr.arpa." down below "Allows zone transfer" is NOT checked. Nameservers shows the zone as "1.168.192.in-addr.arpa." and the Nameserver Hostname as "ns.example.com."
When I select the next line down "192.168.1.250", Resolve 192.168.1.250 to: example.com.
When I select the "000.000.00.in-addr.arpa." element, it has the same settings -- nameservers "000.000.00.in-addr.arpa." and "ns.example.com."
When I select the next line down (our static IP), Resolve 000.000.000.000 to: example.com.
When I select "com." the admin email is populated with a valid email address, Allows zone transfer is NOT checked. In nameservers, Zone is "com." and Nameserver Hostname is "example.com." The mail exchangers are mail2.our-email-isp.com. priority 10 and mail.our-email-isp.com. and priority 20.
When I select the machine "example.com." it shows both the real-world static IP and the 192.168.1.250, same with "www.example.com.".
Am I doing something wrong with this setup? Should "com." be the primary zone or should that be "example.com." ???
I've been thinking about getting rid of the DNS entry for the 192.168.1.250 address altogether, but will the clients in the office suffer performance issues??? I do not think that the client workstations are configured to get DNS from the server anyway. Should the "www.example.com." record be a Machine record or should it be an alias record?
Any help you have to offer is greatly appreciated! Thanks!
In the meantime, I'm going to look around and see if I can understand "Allows zone transfer" and LDAP Search base a bit better.

Okay, I found a lovely article at the following address which I think helps me to clarify what I'm doing wrong. Despite that, I'd still like to have any feedback you have to offer.
http://www.makemacwork.com/configure-internal-dns-1.htm
Also, when editing DNS entries, Server Admin likes to set the nameserver to "ns." -- whatever your domain is. Should I be overriding that and if so, replace it with what?

IPad 2, restore & setup as new, then restore from backup?

Confused yet? I am!
So here we go, yes, I'm new to the forum, I've had my iPad 2 since Oct. 2011. And No, this problem isn't in my head.
Last week, I finally updated to iOS 5.1.1, and I deeply regret doing so. I had NO issue before the update, and now, my battery is garbage.
I used to be able to go 2 - 3 days before having to charge and that's with an average of 4 hours a day. Now, after just a few hours (5) I have to charge and it takes forever. I've been working with Apple, but they having given me an option I'm happy with.
1) Mail my unit back to them to switch out with a refurb. I am against this option as I like my unit. I didn't originally buy a refurb and I should have to accept one now. The screen on my unit is perfect, no bleed or dead pixels. I've taken immaculate care of mine and I'm afraid I'll get a unit I'm not happy with. Plus, it will be running iOS 6, which I'm not ready for.
Option two is...and this needs to be done whether I return my unit or not, is a restore and setup as new. Which means I would loose all my information buried deep within my apps. This would also install iOS 6 on my unit.
My question is this...
If I do a Restore, Setup as new, can I then go back in and do a restore from back up, to put all my stuff back in its place.
I'd love to hear from anyone that has any insight, suggestions, experience, or comments about this.
How did you handle it?
What was the outcome?
Did you involve Apple in the resolution?
Or,
Is it just not worth dealing with and I should just keep using it until it won't take a charge.
I know there have been a million posts about this, and I've read a lot of them, but I just haven't found a solution yet.
And before anyone states the obvious, ALL locations are off, all email accounts are set to manual, there are no notifications set.
In the past week, I've done 3 reset all settings, drained battery until system shut down, and did an uninterrupted full charge.
I've reset network settings. I make sure apps are closed by double tapping Home button, and done a hard reset by holding power button and home button until apple icon appears. I'm at a loss, and don't know what else to do.

First, make sure you are using the most current version of iTunes 11.1.3 (8). Second, what version of iOS 7 was your old phone running, i.e. 7.0, 7.0.1, 7.0.2? If your back-up was made with a version of iOS that is newer than the version on your new phone, it will not sync. For example, if your back-up was of a phone running iOS 7.0.4, and your new phone was running 7.0.2 out of the box, the back up will not sync to the new phone until it is updated to iOS 7.0.4.

Mail server setup issues

Hi.
I am in trouble setting up a basic mail server. I just spent the last 10 or so hours, in one more try to set it, and yet no results.
Please, give some help as i am becoming sort of desperated with it
This time, i followed this guide since the beginning.
What I've done:
- Created a user vmail, with home directory set on /var/mail/vmail/
- Had a LAMP server already working.
- Created two databases: postfix_db and roundcube_db, owned by postfix_user and roundcube_user respectively.
- Since it is for personal use and i don't use "old/odd clients like Outlook" i skipped smtps. And made the following files:
My postfix main.cf(every commented line removed):
queue_directory = /var/spool/postfix
command_directory = /usr/bin
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
mail_owner = postfix
mydomain = mydomainname.tld
unknown_local_recipient_reject_code = 550
alias_maps = hash:/etc/postfix/aliases
alias_database = $alias_maps
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
ddd $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/bin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
sample_directory = /etc/postfix/sample
readme_directory = /usr/share/doc/postfix
inet_protocols = ipv4
relay_domains = *
virtual_alias_maps = proxy:mysql:/etc/postfix/virtual_alias_maps.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/virtual_mailbox_maps.cf
virtual_mailbox_base = /var/mail/vmail
virtual_mailbox_limit = 512000000
virtual_minimum_uid = 5000
virtual_transport = virtual
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
local_transport = virtual
local_recipient_maps = $virtual_mailbox_maps
transport_maps = hash:/etc/postfix/transport
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = /var/run/dovecot/auth-client
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/private/server.crt
smtpd_tls_key_file = /etc/ssl/private/server.key
smtpd_sasl_local_domain = $mydomain
broken_sasl_auth_clients = yes
smtpd_tls_loglevel = 1
Postfix master.cf
smtp inet n - n - - smtpd
submission inet n - n - - smtpd
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
pickup unix n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr unix n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
/etc/postfix/virtual_alias_maps.cf (sample password)
user = postfix_user
password = m/<~VN4XQ!G=jE[A/-
hosts = localhost
dbname = postfix_db
query = SELECT goto FROM alias WHERE address='%s' AND active = true
/etc/postfix/virtual_domains_maps.cf
user = postfix_user
password = m/<~VN4XQ!G=jE[A/-
hosts = localhost
dbname = postfix_db
query = SELECT domain FROM domain WHERE domain='%s' AND backupmx = false AND active = true
/etc/postfix/virtual_mailbox_limits.cf
user = postfix_user
password = m/<~VN4XQ!G=jE[A/-
hosts = localhost
dbname = postfix_db
query = SELECT quota FROM mailbox WHERE username='%s'
/etc/postfix/virtual_mailbox_maps.cf
user = postfix_user
password = m/<~VN4XQ!G=jE[A/-
hosts = localhost
dbname = postfix_db
query = SELECT maildir FROM mailbox WHERE username='%s' AND active = true
- Created the SSL key with no problem, and put it in place.
Edited dovecot.conf:
protocols = imap pop3
auth_mechanisms = plain
passdb {
driver = sql
args = /etc/dovecot/dovecot-sql.conf
userdb sql {
driver = sql
args = /etc/dovecot/dovecot-sql.conf
service auth {
unix_listener auth-client {
group = postfix
mode = 0660
user = postfix
user = root
mail_home = /var/mail/vmail/%d/%u
mail_location = maildir:~
ssl_cert = </etc/ssl/private/server.crt
ssl_key = </etc/ssl/private/server.key
dict {
#quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
#expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext
!include conf.d/*.conf
!include_try local.conf
/etc/dovecot/dovecot-sql.conf
driver = mysql
connect = host=localhost dbname=postfix_db user=postfix_user password=m/<~VN4XQ!G=jE[A/-
default_pass_scheme = MD5-CRYPT
user_query = SELECT '/var/mail/vmail/%d/%u' as home, 'maildir:/var/mail/vmail/%d/%u' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1'
password_query = SELECT username as user, password, '/var/mail/vmail/%d/%u' as userdb_home, 'maildir:/var/mail/vmail/%d/%u' as userdb_mail, 5000 as userdb_uid, 5000 as userdb_gid FROM mailbox WHERE username = '%u' AND active = '1'
- Installed postfixadmin and roundcube and made their apache alias.
- Made directories writable for them.
/etc/webapps/postfixadmin/config.inc.php (note that there is no "?>" to end the script, it came just like that, and since it had no error there ill assume its normal)
<?php
$CONF['configured'] = true;
$CONF['setup_password'] = '562bc24a874b0c2a7340e3da04b3fdf6:d60282f5cbc19340c73cafbb6526379be696a7c7';
$CONF['postfix_admin_url'] = '[url]http://mydomain.com/postfixadmin[/url]';
$CONF['postfix_admin_path'] = dirname(__FILE__);
$CONF['default_language'] = 'en';
$CONF['database_prefix'] = '';
$CONF['database_tables'] = array (
'admin' => 'admin',
'alias' => 'alias',
'alias_domain' => 'alias_domain',
'config' => 'config',
'domain' => 'domain',
'domain_admins' => 'domain_admins',
'fetchmail' => 'fetchmail',
'log' => 'log',
'mailbox' => 'mailbox',
'vacation' => 'vacation',
'vacation_notification' => 'vacation_notification',
'quota' => 'quota',
'quota2' => 'quota2',
$CONF['admin_email'] = '[email protected]';
$CONF['smtp_server'] = 'localhost';
$CONF['smtp_port'] = '25';
$CONF['encrypt'] = 'md5crypt';
$CONF['authlib_default_flavor'] = 'md5raw';
$CONF['dovecotpw'] = "/usr/sbin/dovecotpw";
$CONF['min_password_length'] = 5;
$CONF['generate_password'] = 'NO';
$CONF['show_password'] = 'NO';
$CONF['page_size'] = '10';
$CONF['default_aliases'] = array (
'abuse' => '[email protected]',
'hostmaster' => '[email protected]',
'postmaster' => '[email protected]',
'webmaster' => '[email protected]'
$CONF['domain_path'] = 'NO';
$CONF['domain_in_mailbox'] = 'YES';
$CONF['maildir_name_hook'] = 'NO';
$CONF['aliases'] = '10';
$CONF['mailboxes'] = '10';
$CONF['maxquota'] = '10';
$CONF['quota'] = 'NO';
$CONF['quota_multiplier'] = '1024000';
$CONF['transport'] = 'NO';
$CONF['transport_options'] = array (
'virtual', // for virtual accounts
'local', // for system accounts
'relay' // for backup mx
$CONF['transport_default'] = 'virtual';
$CONF['vacation'] = 'NO';
$CONF['vacation_domain'] = 'autoreply.change-this-to-your.domain.tld';
$CONF['vacation_control'] ='YES';
$CONF['vacation_control_admin'] = 'YES';
$CONF['alias_control'] = 'NO';
$CONF['alias_control_admin'] = 'NO';
$CONF['special_alias_control'] = 'NO';
$CONF['alias_goto_limit'] = '0';
$CONF['alias_domain'] = 'YES';
$CONF['backup'] = 'YES';
$CONF['sendmail'] = 'YES';
$CONF['logging'] = 'YES';
$CONF['fetchmail'] = 'YES';
$CONF['fetchmail_extra_options'] = 'NO';
$CONF['show_header_text'] = 'NO';
$CONF['header_text'] = ':: Postfix Admin ::';
$CONF['user_footer_link'] = "[url]http://mydomain.com[/url]";
$CONF['show_footer_text'] = 'YES';
$CONF['footer_text'] = 'Return to mydomain.com';
$CONF['footer_link'] = '[url]http://mydomain.com[/url]';
$CONF['welcome_text'] = <<<EOM
Welcome to your new account.
EOM;
$CONF['emailcheck_resolve_domain']='YES';
$CONF['show_status']='NO';
$CONF['show_status_key']='NO';
$CONF['show_status_text']='  ';
$CONF['show_undeliverable']='NO';
$CONF['show_undeliverable_color']='tomato';
$CONF['show_undeliverable_exceptions']=array("unixmail.domain.ext","exchangeserver.domain.ext","gmail.com");
$CONF['show_popimap']='NO';
$CONF['show_popimap_color']='darkgrey';
$CONF['show_custom_domains']=array("subdomain.domain.ext","domain2.ext");
$CONF['show_custom_colors']=array("lightgreen","lightblue");
$CONF['recipient_delimiter'] = "";
$CONF['create_mailbox_subdirs_prefix']='INBOX.';
$CONF['used_quotas'] = 'NO';
$CONF['new_quota_table'] = 'NO';
$CONF['theme_logo'] = 'images/logo-default.png';
$CONF['theme_css'] = 'css/default.css';
$CONF['xmlrpc_enabled'] = false;
if (file_exists(dirname(__FILE__) . '/config.local.php')) {
include(dirname(__FILE__) . '/config.local.php');
$CONF['domain_path'] = 'YES';
$CONF['domain_in_mailbox'] = 'YES';
$CONF['database_type'] = 'mysqli';
$CONF['database_host'] = 'localhost';
$CONF['database_user'] = 'postfix_user';
$CONF['database_password'] = 'm/<~VN4XQ!G=jE[A/-';
$CONF['database_name'] = 'postfix_db';
- I went to domain/postfixAdmin/setup.php and domain/roundcube/installer/ and everything was ok.
db.inc.php (roundcube):
<?php
$rcmail_config = array();
$rcmail_config['db_dsnw'] = 'mysql://roundcube_user:%3D%29CYbd9bK%210Z7%29AsWU@localhost/roundcube_db';
$rcmail_config['db_dsnr'] = '';
$rcmail_config['db_persistent'] = FALSE;
$rcmail_config['db_table_users'] = 'users';
$rcmail_config['db_table_identities'] = 'identities';
$rcmail_config['db_table_contacts'] = 'contacts';
$rcmail_config['db_table_contactgroups'] = 'contactgroups';
$rcmail_config['db_table_contactgroupmembers'] = 'contactgroupmembers';
$rcmail_config['db_table_session'] = 'session';
$rcmail_config['db_table_cache'] = 'cache';
$rcmail_config['db_table_cache_index'] = 'cache_index';
$rcmail_config['db_table_cache_thread'] = 'cache_thread';
$rcmail_config['db_table_cache_messages'] = 'cache_messages';
$rcmail_config['db_table_dictionary'] = 'dictionary';
$rcmail_config['db_table_searches'] = 'searches';
$rcmail_config['db_table_system'] = 'system';
$rcmail_config['db_sequence_users'] = 'user_ids';
$rcmail_config['db_sequence_identities'] = 'identity_ids';
$rcmail_config['db_sequence_contacts'] = 'contact_ids';
$rcmail_config['db_sequence_contactgroups'] = 'contactgroups_ids';
$rcmail_config['db_sequence_searches'] = 'search_ids';
main.inc.php(roundcube):
<?php
$rcmail_config = array();
$rcmail_config['debug_level'] = 5;
$rcmail_config['log_driver'] = 'file';
$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
$rcmail_config['syslog_id'] = 'roundcube';
$rcmail_config['syslog_facility'] = LOG_USER;
$rcmail_config['smtp_log'] = true;
$rcmail_config['log_logins'] = false;
$rcmail_config['log_session'] = false;
$rcmail_config['sql_debug'] = false;
$rcmail_config['imap_debug'] = false;
$rcmail_config['ldap_debug'] = false;
$rcmail_config['smtp_debug'] = false;
$rcmail_config['default_host'] = 'tls://localhost/';
$rcmail_config['default_port'] = 993;
$rcmail_config['imap_auth_type'] = null;
$rcmail_config['imap_delimiter'] = null;
$rcmail_config['imap_ns_personal'] = null;
$rcmail_config['imap_ns_other'] = null;
$rcmail_config['imap_ns_shared'] = null;
$rcmail_config['imap_force_caps'] = false;
$rcmail_config['imap_force_lsub'] = false;
$rcmail_config['imap_force_ns'] = false;
$rcmail_config['imap_timeout'] = 0;
$rcmail_config['imap_auth_cid'] = null;
$rcmail_config['imap_auth_pw'] = null;
$rcmail_config['imap_cache'] = null;
$rcmail_config['messages_cache'] = false;
$rcmail_config['smtp_server'] = 'tls://localhost/';
$rcmail_config['smtp_port'] = 587;
$rcmail_config['smtp_user'] = '';
$rcmail_config['smtp_pass'] = '';
$rcmail_config['smtp_auth_type'] = '';
$rcmail_config['smtp_auth_cid'] = null;
$rcmail_config['smtp_auth_pw'] = null;
$rcmail_config['smtp_helo_host'] = '';
$rcmail_config['smtp_timeout'] = 0;
$rcmail_config['enable_installer'] = false;
$rcmail_config['dont_override'] = array();
$rcmail_config['support_url'] = '';
$rcmail_config['skin_logo'] = 'sorrybutnocookie';
$rcmail_config['auto_create_user'] = true;
$rcmail_config['user_aliases'] = false;
$rcmail_config['log_dir'] = 'logs/';
$rcmail_config['temp_dir'] = 'temp/';
$rcmail_config['message_cache_lifetime'] = '10d';
$rcmail_config['force_https'] = false;
$rcmail_config['use_https'] = false;
$rcmail_config['login_autocomplete'] = 0;
$rcmail_config['login_lc'] = 2;
$rcmail_config['skin_include_php'] = false;
$rcmail_config['display_version'] = false;
$rcmail_config['session_lifetime'] = 10;
$rcmail_config['session_domain'] = '';
$rcmail_config['session_name'] = null;
$rcmail_config['session_auth_name'] = null;
$rcmail_config['session_path'] = null;
$rcmail_config['session_storage'] = 'db';
$rcmail_config['memcache_hosts'] = null;
$rcmail_config['ip_check'] = true;
$rcmail_config['referer_check'] = false;
$rcmail_config['x_frame_options'] = 'sameorigin';
$rcmail_config['des_key'] = '0JaV%FnEivx9e+JdH2g*?n3n';
$rcmail_config['username_domain'] = '';
$rcmail_config['mail_domain'] = '';
$rcmail_config['password_charset'] = 'ISO-8859-1';
$rcmail_config['sendmail_delay'] = 0;
$rcmail_config['max_recipients'] = 0;
$rcmail_config['max_group_members'] = 0;
$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
$rcmail_config['product_name'] = 'Test';
$rcmail_config['include_host_config'] = false;
$rcmail_config['generic_message_footer'] = '';
$rcmail_config['generic_message_footer_html'] = '';
$rcmail_config['http_received_header'] = false;
$rcmail_config['http_received_header_encrypt'] = false;
$rcmail_config['mail_header_delimiter'] = NULL;
$rcmail_config['line_length'] = 72;
$rcmail_config['send_format_flowed'] = true;
$rcmail_config['mdn_use_from'] = false;
$rcmail_config['identities_level'] = 0;
$rcmail_config['client_mimetypes'] = null;
$rcmail_config['mime_magic'] = null;
$rcmail_config['mime_types'] = null;
$rcmail_config['im_identify_path'] = null;
$rcmail_config['im_convert_path'] = null;
$rcmail_config['image_thumbnail_size'] = 240;
$rcmail_config['contact_photo_size'] = 160;
$rcmail_config['email_dns_check'] = false;
$rcmail_config['no_save_sent_messages'] = false;
$rcmail_config['plugins'] = array();
$rcmail_config['message_sort_col'] = '';
$rcmail_config['message_sort_order'] = 'DESC';
$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
$rcmail_config['language'] = null;
$rcmail_config['date_format'] = 'Y-m-d';
$rcmail_config['date_formats'] = array('Y-m-d', 'Y/m/d', 'Y.m.d', 'd-m-Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
$rcmail_config['time_format'] = 'H:i';
$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
$rcmail_config['date_short'] = 'D H:i';
$rcmail_config['date_long'] = 'Y-m-d H:i';
$rcmail_config['drafts_mbox'] = 'Drafts';
$rcmail_config['junk_mbox'] = 'Junk';
$rcmail_config['sent_mbox'] = 'Sent';
$rcmail_config['trash_mbox'] = 'Trash';
$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Junk', 'Trash');
$rcmail_config['create_default_folders'] = false;
$rcmail_config['protect_default_folders'] = true;
$rcmail_config['quota_zero_as_unlimited'] = false;
$rcmail_config['enable_spellcheck'] = false;
$rcmail_config['spellcheck_dictionary'] = false;
$rcmail_config['spellcheck_engine'] = 'googie';
$rcmail_config['spellcheck_uri'] = '';
$rcmail_config['spellcheck_languages'] = NULL;
$rcmail_config['spellcheck_ignore_caps'] = false;
$rcmail_config['spellcheck_ignore_nums'] = false;
$rcmail_config['spellcheck_ignore_syms'] = false;
$rcmail_config['recipients_separator'] = ',';
$rcmail_config['max_pagesize'] = 200;
$rcmail_config['min_refresh_interval'] = 60;
$rcmail_config['upload_progress'] = false;
$rcmail_config['undo_timeout'] = 0;
$rcmail_config['address_book_type'] = 'sql';
$rcmail_config['ldap_public'] = array();
$rcmail_config['autocomplete_addressbooks'] = array('sql');
$rcmail_config['autocomplete_min_length'] = 1;
$rcmail_config['autocomplete_threads'] = 0;
$rcmail_config['autocomplete_max'] = 15;
$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
$rcmail_config['addressbook_search_mode'] = 0;
$rcmail_config['default_charset'] = 'ISO-8859-1';
$rcmail_config['skin'] = 'larry';
$rcmail_config['mail_pagesize'] = 50;
$rcmail_config['addressbook_pagesize'] = 50;
$rcmail_config['addressbook_sort_col'] = 'surname';
$rcmail_config['addressbook_name_listing'] = 0;
$rcmail_config['timezone'] = 'auto';
$rcmail_config['prefer_html'] = true;
$rcmail_config['show_images'] = 0;
$rcmail_config['message_extwin'] = false;
$rcmail_config['compose_extwin'] = false;
$rcmail_config['htmleditor'] = 0;
$rcmail_config['prettydate'] = true;
$rcmail_config['draft_autosave'] = 300;
$rcmail_config['preview_pane'] = false;
$rcmail_config['preview_pane_mark_read'] = 0;
$rcmail_config['logout_purge'] = false;
$rcmail_config['logout_expunge'] = false;
$rcmail_config['inline_images'] = true;
$rcmail_config['mime_param_folding'] = 0;
$rcmail_config['skip_deleted'] = false;
$rcmail_config['read_when_deleted'] = true;
$rcmail_config['flag_for_deletion'] = false;
$rcmail_config['refresh_interval'] = 60;
$rcmail_config['check_all_folders'] = false;
$rcmail_config['display_next'] = true;
$rcmail_config['autoexpand_threads'] = 0;
$rcmail_config['reply_mode'] = 0;
$rcmail_config['strip_existing_sig'] = true;
$rcmail_config['show_sig'] = 1;
$rcmail_config['force_7bit'] = false;
$rcmail_config['search_mods'] = null;
$rcmail_config['addressbook_search_mods'] = null;
$rcmail_config['delete_always'] = false;
$rcmail_config['delete_junk'] = false;
$rcmail_config['mdn_requests'] = 0;
$rcmail_config['mdn_default'] = 0;
$rcmail_config['dsn_default'] = 0;
$rcmail_config['reply_same_folder'] = false;
$rcmail_config['forward_attachment'] = false;
$rcmail_config['default_addressbook'] = null;
$rcmail_config['spellcheck_before_send'] = false;
$rcmail_config['autocomplete_single'] = false;
$rcmail_config['default_font'] = 'Verdana';
- From what i can see, postfixadmin used and populated its database, but not roundcube.
- I can open postfixadmin and log in with no apparent errors (not that i know what to do with it instead of roundcube, but at least works...)
- Whenever i open roundcube it begins to output errors everywhere about db connection (I was only able after changing its .htaccess to Allow from all, is it a bad idea?)
DB Error in /usr/share/webapps/roundcubemail/program/lib/Roundcube/rcube_db.php (416): [1146] Table 'roundcube_db.session' doesn't exist (SQL Query: SELECT vars, ip, changed FROM session WHERE sess_id = 'pq5ofv7ja0gh2sunsg38jmd3g1')
Warning: session_start(): Cannot send session cache limiter - headers already sent in /usr/share/webapps/roundcubemail/program/lib/Roundcube/rcube.php on line 445
DB Error: [1146] Table 'roundcube_db.session' doesn't exist
DATABASE ERROR: CONNECTION FAILED!
Unable to connect to the database!
Please contact your server-administrator.
DB Error in /usr/share/webapps/roundcubemail/program/lib/Roundcube/rcube_db.php (416): [1146] Table 'roundcube_db.session' doesn't exist (SQL Query: INSERT INTO session (sess_id, vars, ip, created, changed) VALUES ('pq5ofv7ja0gh2sunsg38jmd3g1', 'dGVtcHxiOjE7bGFuZ3VhZ2V8czo1OiJlbl9VUyI7dGFza3xzOjU6ImxvZ2luIjs=', 'xxx.xxx.xxx.xxx', '2014-02-08 07:34:46', '2014-02-08 07:34:46'))
Thats all i know. Whats wrong? (i already tried to set db logins with no pw at all, but still with the same problems)
How far am i to be able to send/receive one email? Please, tell me i am close...
Mail servers could be so much more linear to set up
Thanks for your help. Time to get some sleep!

The roundcube db schema needs to setup manually. See /usr/share/webapps/roundcube/INSTALL
Also, from your /etc/webapps/postfixadmin/config.inc.php:
$CONF['domain_path'] = 'NO';
$CONF['domain_in_mailbox'] = 'YES';
$CONF['maildir_name_hook'] = 'NO';
..which results in /var/mail/vmail/[email protected]
From your dovecot.conf
mail_home = /var/mail/vmail/%d/%u
...which results in /var/mail/vmail/domain.com/user
That doesn't fit together.

DKIM setup

Similar Messages

Maybe you are looking for