Differences
This shows you the differences between two versions of the page.
— | opendkim [2018/10/30 07:18] (current) – created - external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ====== opendkim ====== | ||
+ | * [[Mail Servers]] | ||
+ | * [[postfix]] | ||
+ | |||
+ | opendkim can sign outgoing email with your SMTP server to match DNS TXT DKIM records. | ||
+ | |||
+ | The selector here, '' | ||
+ | |||
+ | A sample '' | ||
+ | |||
+ | < | ||
+ | Syslog | ||
+ | SyslogSuccess | ||
+ | Canonicalization | ||
+ | Domain | ||
+ | Selector | ||
+ | KeyFile | ||
+ | Socket | ||
+ | ReportAddress | ||
+ | SendReports | ||
+ | PidFile / | ||
+ | UserID milter | ||
+ | Statistics / | ||
+ | </ | ||
+ | |||
+ | Set the owner of the private key to '' | ||
+ | |||
+ | Start the opendkim service, and configure Postfix to use it: | ||
+ | |||
+ | < | ||
+ | smtpd_milters = inet: | ||
+ | non_smtpd_milters = inet: | ||
+ | </ | ||
+ | |||
+ | Outgoing email is then going to be signed. Setup the DNS records to use it for source verification. | ||
+ | |||
+ | ==== Multiple Domains ==== | ||
+ | |||
+ | OpenDKIM can sign for multiple domains at once. Instead of using '' | ||
+ | |||
+ | Create a KeyTable with this format: | ||
+ | |||
+ | < | ||
+ | key-name | ||
+ | </ | ||
+ | |||
+ | The '' | ||
+ | |||
+ | < | ||
+ | rsa-beandog | ||
+ | </ | ||
+ | |||
+ | Save the contents to a file, and reference it in '' | ||
+ | |||
+ | < | ||
+ | KeyTable | ||
+ | </ | ||
+ | |||
+ | **Note:** You can still have '' | ||
+ | |||
+ | Next, create a signing table, that maps what domains to sign what key with. The contents are the email address or domain name (etc.) and what key you'd like to sign with. | ||
+ | |||
+ | An example here would sign every email from beandog.org with the '' | ||
+ | |||
+ | < | ||
+ | *@beandog.org | ||
+ | </ | ||
+ | |||
+ | Since the entry has regular expressions in it, we'll add '' | ||
+ | |||
+ | < | ||
+ | SigningTable | ||
+ | </ | ||
+ | |||
+ | Restart opendkim, and send some emails. With logging enabled, in the temporary directory, you will see both the header added to the email, plus the contents of the message. | ||
+ | ==== Logging ==== | ||
+ | |||
+ | If debugging, you can turn on lots of logging to see what is happening. Add to '' | ||
+ | |||
+ | < | ||
+ | KeepTemporaryFiles | ||
+ | LogResults | ||
+ | LogWhy | ||
+ | </ | ||
+ | |||
+ | If you want to specify a specific directory, use '' |