Instalacja
xbps-install -Suv opendkim
useradd -r -s /sbin/nologin -d /var/empty opendkim
OpenDKIM
/etc/opendkim.conf:
Syslog yes
SyslogSuccess yes
LogWhy yes
UMask 002
Mode sv
# PidFile /var/run/opendkim/opendkim.pid
UserID opendkim:opendkim
Socket inet:12321@localhost
Canonicalization relaxed/relaxed
SignatureAlgorithm rsa-sha256
ExternalIgnoreList refile:/etc/opendkim.d/TrustedHosts
InternalHosts refile:/etc/opendkim.d/TrustedHosts
KeyTable /etc/opendkim.d/KeyTable
SigningTable refile:/etc/opendkim.d/SigningTable
mkdir /etc/opendkim.d
TrustedHosts
/etc/opendkim.d/TrustedHosts:
127.0.0.1
localhost
mail.bogus.corp
KeyTable
/etc/opendkim.d/KeyTable:
default._domainkey.bogus.corp bogus.corp:default:/etc/opendkim.d/keys/bogus.corp/default.private
SigningTable
/etc/opendkim.d/SigningTable:
bogus.corp default._domainkey.bogus.corp
DKIM key
mkdir -p /etc/opendkim.d/keys/bogus.corp
cd /etc/opendkim/keys/bogus.corp
opendkim-genkey -r -d bogus.corp
chmod -R u=rwX,g=rX,o= /etc/opendkim.d && chown -R root:opendkim /etc/opendkim.d
Start usługi
ln -s /etc/sv/opendkim/ /var/service/
DNS
Wpis rekordu TXT w domenie:
cat /etc/opendkim.d/keys/bogus.corp/default.txt
default._domainkey IN TXT ( "v=DKIM1; k=rsa; s=email; "
"p=MIGfMA0giB3dqebAQUaA4gnAdCcsQgsBiqkbGqdIpIaXmFecGj0np/D6vEUvBKnUnKx
9uEOGPWzpWFmZT4YI+zByluYnXpm04ITnu17JPHca2yTrOo1WugJDStDpplm2h3RiRbi2lwS5rDEwkl7
q2Erdryf+Ts13wZna3lMkdlXRZaykvbTssROqFDzeEqONyQH24iKjYekmcyt4AwIDaqAb"
) ; ----- DKIM key default for bogus.corp
Postfix
/etc/postfix/main.cf:
[...]
milter_protocol = 2
milter_default_action = accept
smtpd_milters = inet:localhost:12321
non_smtpd_milters = $smtpd_milters
[...]
sv restart postfix
Info
Tagi DKIM
| Tag | Opis |
|---|---|
v | wersja DKIM (zawsze 1) |
p | klucz publiczny (wymagany) |
t | lista flag |
s | lista typów usług (poprawny tylko email) |
h | akceptowalne algorytmy mieszające |
k | typ klucza (domyślnie: rsa) |
n | opcjonalna notatka |