groupoffice icon indicating copy to clipboard operation
groupoffice copied to clipboard

DKIM Feature vs RSPAMD

Open gmcpaul opened this issue 9 months ago • 6 comments

Dear Groupoffice Devs,

I wanted to point out or ask how the suggestion is to use DKIM? Because the new DKIM feature was added to the Groupoffice 25.0.x Release and RSPAMD also can support the feature, which is part of the groupoffice-mailserver-antispam package. Until now i used the feature in rspamd.

So maybe i needs adressing in the docu or is it ok to remove opendkim when using rspamd?

👍 👎 ?

thanks

gmcpaul avatar Apr 09 '25 12:04 gmcpaul

Hi, I understand the confusion. We chose opendkim because it can connect to the MySQL database. That way we can easily maintain the dkim keys from the web gui. Unfortunately rspamd can only read them from disk. Best regards, Merijn

mschering avatar Apr 09 '25 19:04 mschering

Not confused but maybe it needs addressing in the documentation, which way to go. Or if it is ok to remove the opendkim service, when using other solutions like rspamd. thats what i wanted to point out and on the same for me personally i would like to know if i choose rspamd to do the job, if i can remove the package, or not

because i like groupoffice a lot, i just want to participate with what i see you know ;)

br paul

gmcpaul avatar Apr 10 '25 09:04 gmcpaul

Yes thank you for participating!

You can;t remove opendkim because it's listed as a dependency in the package. Without it the DKIM GUI will be broken.

mschering avatar Apr 14 '25 10:04 mschering

ok then maybe a disable option in the config php would make sense maybe, so users can opt to go other ways. would that make sense as "feature"

gmcpaul avatar Apr 14 '25 10:04 gmcpaul

But what's wrong with using opendkim?

mschering avatar Apr 14 '25 11:04 mschering

nothing, but since rspamd, as an added package for spamfighting allready, does the magic too, i would recommend to opt out or at least document in the admin manual, how to optionally not use opendkim

if only a service disable is okay or anything, thats fine. bit to reduce redundanedency or possible misconfiguration due to the fact that it can or has been done somwhere else makes it mendantory to handle somehow ... one way or the other.

gmcpaul avatar Apr 14 '25 12:04 gmcpaul