new feature: DKIM message signing
[email protected] (Matt Simerson) Fri, 26 Apr 2013 01:47:38 -0700
| Newsgroups | perl.qpsmtpd |
|---|---|
| Message-ID | <[email protected]> |
I added a signing feature to my DKIM plugin.=20
https://github.com/qpsmtpd-dev/qpsmtpd-dev/blob/master/plugins/dkim
Matt
PS: for added pleasure, I also added a script that makes deploying DKIM =
really, really easy. How easy?
# cd ~smtpd/config/dkim
# ./dkim_key_gen.sh example.org
Voila. Keys and selector generated. Now DNS needs to be updated. I made =
that easy too:
# cat example.org/dns
apr2013._domainkey TXT =
"v=3DDKIM1;p=3DMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Wu1fd74UXwH//=
0uiX/6C0hkv3I/PdeTxfnzHN6GrehJpCYBd1BKuigduwt/wZFVgUopwxmcjxSK6qrkADtHC+Zi=
qC/sqcVuVDhnvzkIgd7dYhqBcVORg6f8Eg8132yPkmHyDm588qKfdFSEUVgBqSfqZg4ZdG4Uq5=
erHAyQIEcs0h7xqUKJKA5xJWdRwaVYbNkNDAscax1WrSvMHQkKBf5bWUtkMGc/HeoZ6T3VTn5L=
e0OgLoINj4lNTFfT6toXsbZsKzOaUYacnWVOq2v2lWgghOMRQHYPr7ldl2E7/6sNSpNT8KXAiT=
7wlfE+/xXg+0DyQq/ahKaPgAecCCFiwIDAQAB"
Tell the world that the ONLY mail servers that send mail from this =
domain are DKIM signed and/or bear our MX and A records.
With SPF:
SPF "v=3Dspf1 mx a -all"
TXT "v=3Dspf1 mx a -all"
With DMARC:
_dmarc TXT "v=3DDMARC1; p=3Dreject; adkim=3Ds; aspf=3Dr; =
rua=3Dmailto:[email protected]; =
ruf=3Dmailto:dmarc-feedback@'example.org; pct=3D100"
With DomainKeys (deprecated)
_domainkey TXT "o=3D-; t=3Dy; [email protected]"
For more information about DKIM and SPF policy, the documentation within =
each plugin contains a longer discussion and links to more detailed =
information:
perldoc plugins/dkim
perldoc plugins/sender_permitted_from