Re: new feature: DKIM message signing
[email protected] (Shane Hill) Sun, 28 Apr 2013 06:17:53 -0700
| Newsgroups | perl.qpsmtpd |
|---|---|
| Message-ID | <CACSmNys7w31F+WCj41KO+LjtD+5owN=CbmdCjCOOOAmG0ZT0ew@mail.gmail.com> |
--14dae934061d84b4b104db6b9850 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On Fri, Apr 26, 2013 at 1:47 AM, Matt Simerson <[email protected]> wrote: > > > > PS: for added pleasure, I also added a script that makes deploying DKIM > really, really easy. How easy? > > yay! > # cd ~smtpd/config/dkim > # ./dkim_key_gen.sh example.org > > Voila. Keys and selector generated. Now DNS needs to be updated. I made > that easy too: > > # cat example.org/dns > > apr2013._domainkey TXT > "v=3DDKIM1;p=3DMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Wu1fd74UXwH/= /0uiX/6C0hkv3I/PdeTxfnzHN6GrehJpCYBd1BKuigduwt/wZFVgUopwxmcjxSK6qrkADtHC+Zi= qC/sqcVuVDhnvzkIgd7dYhqBcVORg6f8Eg8132yPkmHyDm588qKfdFSEUVgBqSfqZg4ZdG4Uq5e= rHAyQIEcs0h7xqUKJKA5xJWdRwaVYbNkNDAscax1WrSvMHQkKBf5bWUtkMGc/HeoZ6T3VTn5Le0= OgLoINj4lNTFfT6toXsbZsKzOaUYacnWVOq2v2lWgghOMRQHYPr7ldl2E7/6sNSpNT8KXAiT7wl= fE+/xXg+0DyQq/ahKaPgAecCCFiwIDAQAB" > > Tell the world that the ONLY mail servers that send mail from this domain > are DKIM signed and/or bear our MX and A records. > > With SPF: > > SPF "v=3Dspf1 mx a -all" > TXT "v=3Dspf1 mx a -all" > > With DMARC: > > _dmarc TXT "v=3DDMARC1; p=3Dreject; adkim=3Ds; aspf=3Dr; rua=3Dmailto: > [email protected]; ruf=3Dmailto:dmarc-feedback@'example.org; > pct=3D100" > > With DomainKeys (deprecated) > > _domainkey TXT "o=3D-; t=3Dy; [email protected]" > > For more information about DKIM and SPF policy, the documentation within > each plugin contains a longer discussion and links to more detailed > information: > > perldoc plugins/dkim > perldoc plugins/sender_permitted_from > > > --14dae934061d84b4b104db6b9850--