DKIM setup writeup for multi domain?

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

DKIM setup writeup for multi domain?

Voytek
I;m looking at adding DKIM to my Postfix

is there some up to date DKIM setup write up for multi domain Postfix
setup ? most of the ones I've found are for single domain, and, use
different setups, hence I'm trying to figure out what's the best way to
set this up.

V

Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

Andrey Repin-2
Greetings, [hidden email]!

> I;m looking at adding DKIM to my Postfix

> is there some up to date DKIM setup write up for multi domain Postfix
> setup ?

Since postfix itself does not perform DKIM signing or validation, the postfix
setup is no different, no matter, how many domains you are using.

> most of the ones I've found are for single domain, and, use
> different setups, hence I'm trying to figure out what's the best way to
> set this up.

You just set "this" up and tell your DKIM handler what to do.


--
With best regards,
Andrey Repin
Tuesday, March 12, 2019 15:48:27

Sorry for my terrible english...

Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

Ralph Seichter-2
In reply to this post by Voytek
> is there some up to date DKIM setup write up for multi domain Postfix
> setup ?

Amavisd and OpenDKIM each support multiple domains. Since Postfix does
not handle DKIM signatures, you need to look into external tools.

-Ralph
Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

Michael-4
In reply to this post by Voytek
I think this is the one I used.  Works great.
https://www.stevejenkins.com/blog/2011/08/installing-opendkim-rpm-via-yum-with-postfix-or-sendmail-for-rhel-centos-fedora/


On 2019-03-12 7:31 am, [hidden email] wrote:

> I;m looking at adding DKIM to my Postfix
>
> is there some up to date DKIM setup write up for multi domain Postfix
> setup ? most of the ones I've found are for single domain, and, use
> different setups, hence I'm trying to figure out what's the best way to
> set this up.
>
> V
Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

angelo
In reply to this post by Voytek
Hi, wouldn't the answer to the OP's question be to just list all the domains they want signed in the file
/etc/opendkim/SigningTable

Assuming they are using Opendkim.

I wrote some documentation here.
https://linux.uits.uconn.edu/dkim-review-of-all-aspects/


-ANGELO FAZZINA

[hidden email]
University of Connecticut,  ITS, SSG, Server Systems
860-486-9075

-----Original Message-----
From: [hidden email] <[hidden email]> On Behalf Of Michael
Sent: Tuesday, March 12, 2019 2:48 PM
To: [hidden email]
Subject: {SPAM?} Re: DKIM setup writeup for multi domain?

I think this is the one I used.  Works great.
https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.stevejenkins.com%2Fblog%2F2011%2F08%2Finstalling-opendkim-rpm-via-yum-with-postfix-or-sendmail-for-rhel-centos-fedora%2F&amp;data=02%7C01%7Cangelo.fazzina%40uconn.edu%7C9624b05d01574a99475608d6a71b7196%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C636880133650788591&amp;sdata=YTfwUuvVVUSb8bzRRKXWNg1xpaVCclorJ6eKAxz2ybw%3D&amp;reserved=0


On 2019-03-12 7:31 am, [hidden email] wrote:

> I;m looking at adding DKIM to my Postfix
>
> is there some up to date DKIM setup write up for multi domain Postfix
> setup ? most of the ones I've found are for single domain, and, use
> different setups, hence I'm trying to figure out what's the best way to
> set this up.
>
> V
Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

Michael-4
I found my notes. This is for RHEL:


yum -y install
https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
subscription-manager repos --enable "rhel-*-optional-rpms" --enable
"rhel-*-extras-rpms"
yum -y install opendkim

#generate keys for each domain
cd /etc/opendkim/keys
mkdir example1.com
mkdir example2.com
opendkim-genkey -D /etc/opendkim/keys/example1.com/ -d example1.com -s
dkim1 -a
opendkim-genkey -D /etc/opendkim/keys/example2.com/ -d example2.com -s
dkim1 -a

chown -R root:opendkim /etc/opendkim/keys/*
chmod 640 /etc/opendkim/keys/example1.com/dkim1.private
chmod 644 /etc/opendkim/keys/example1.com/dkim1.txt
chmod 640 /etc/opendkim/keys/example2.com/dkim1.private
chmod 644 /etc/opendkim/keys/example2.com/dkim1.txt

#/etc/opendkim.conf
Mode s
#LogWhy yes
#KeyFile /etc/opendkim/keys/default.private
KeyTable /etc/opendkim/KeyTable
SigningTable refile:/etc/opendkim/SigningTable
ExternalIgnoreList refile:/etc/opendkim/TrustedHosts

#/etc/opendkim/KeyTable
dkim1._domainkey.example1.com
example1.com:dkim1:/etc/opendkim/keys/example1.com/dkim1.private
dkim1._domainkey.example2.com
example2.com:dkim1:/etc/opendkim/keys/example2.com/dkim1.private

#/etc/opendkim/SigningTable
*@example1.com dkim1._domainkey.example1.com
*@example2.com dkim1._domainkey.example2.com

#/etc/opendkim/TrustedHosts
127.0.0.1
10.0.0.0/8

#/etc/postfix/main.cf
#OpenDKIM
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept





On 2019-03-12 1:52 pm, Fazzina, Angelo wrote:

> Hi, wouldn't the answer to the OP's question be to just list all the
> domains they want signed in the file
> /etc/opendkim/SigningTable
>
> Assuming they are using Opendkim.
>
> I wrote some documentation here.
> https://linux.uits.uconn.edu/dkim-review-of-all-aspects/
>
> -ANGELO FAZZINA
>
> [hidden email]
> University of Connecticut,  ITS, SSG, Server Systems
> 860-486-9075
>
> -----Original Message-----
> From: [hidden email] <[hidden email]>
> On Behalf Of Michael
> Sent: Tuesday, March 12, 2019 2:48 PM
> To: [hidden email]
> Subject: {SPAM?} Re: DKIM setup writeup for multi domain?
>
> I think this is the one I used.  Works great.
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.stevejenkins.com%2Fblog%2F2011%2F08%2Finstalling-opendkim-rpm-via-yum-with-postfix-or-sendmail-for-rhel-centos-fedora%2F&amp;data=02%7C01%7Cangelo.fazzina%40uconn.edu%7C9624b05d01574a99475608d6a71b7196%7C17f1a87e2a254eaab9df9d439034b080%7C0%7C0%7C636880133650788591&amp;sdata=YTfwUuvVVUSb8bzRRKXWNg1xpaVCclorJ6eKAxz2ybw%3D&amp;reserved=0
>
> On 2019-03-12 7:31 am, [hidden email] wrote:
>
>> I;m looking at adding DKIM to my Postfix
>>
>> is there some up to date DKIM setup write up for multi domain Postfix
>> setup ? most of the ones I've found are for single domain, and, use
>> different setups, hence I'm trying to figure out what's the best way
>> to
>> set this up.
>>
>> V
Reply | Threaded
Open this post in threaded view
|

Re: DKIM setup writeup for multi domain?

Voytek

> I found my notes. This is for RHEL:

thanks for all the replies, all very helpful, half way there


V