Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

InterScan Messaging Security Virtual Appliance (IMSVA) does not sign outgoing mails even if DKIM signing is configured and enabled

    • Updated:
    • 5 Jan 2018
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 9.0
    • InterScan Messaging Security Virtual Appliance 9.1
    • Platform:
    • Virtual Appliance すべて
Summary

IMSVA does not sign outgoing mails even if DomainKeys Identified Mail (DKIM) signing is configured and enabled, or in other words, DKIM signature is not added to the mail header.

In Postfix mail log (maillog), the following error message is seen:

Dec  6 18:02:53 imsvahost dkim[5203]: (unknown-jobid): skipping signing of mail to 'someone@somedomain.com'

In older IMSVA versions, the wildcard "*" would have to be added to the internal address list to configure a " from anyone to anyone" policy. When upgrading or migrating from these older versions, the internal address list will be inherited even though the new version doesn't require the wildcard in the list. When the wildcard "*" is in the internal address list, the DKIM signing feature will skip signing all mails as it is not supposed to sign incoming mails.

Details
Public

To resolve this issue:

  1. Go to the IMSVA web UI and navigate to Policy > Internal Addresses.
  2. Check if the wildcard "*" or the target domain has been added to the internal address list.
  3. If "*" or the target domain are on the list, remove them.
  4. Click Save.
  5. Verify if IMSVA can now sign the outgoing mails.
 
This solution will impact the statistics on incoming and outgoing mails. However, the change actually should be expected because the previous statistics are incorrect.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1119192
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.