2017-09-15 87 views
0

我試圖配置EXIM + OpenDKIM在CentOS的7 ... (一切從最新的版本庫)爲什麼不使用EXIM OpenDKIM服務?

我用這個說明配置系統:https://www.rosehosting.com/blog/how-to-install-and-configure-dkim-with-opendkim-and-exim-on-a-centos-7-vps/,布提沒有使用默認的選擇,我試圖用獨特。

發送郵件沒有DKIM簽名,我在EXIM使用此配置:

remote_smtp: 
    driver = smtp 
    DKIM_DOMAIN = $sender_address_domain 
    DKIM_SELECTOR = 20170915exim 
    DKIM_PRIVATE_KEY = ${if exists{/etc/opendkim/keys/$sender_address_domain/20170915exim}{/etc/opendkim/keys/$sender_address_domain/20170915exim}{0}} 
    DKIM_CANON = relaxed 
    DKIM_STRICT = 0 

與此,在/ etc/opendkim:

. 
├── keys 
│ └── valami.com 
│ ├── 20170915exim 
│ └── 20170915exim.txt 
├── KeyTable 
├── SigningTable 
└── TrustedHosts 

但是,當我發送郵件(帶郵件,或通過telnet或任何其他),EXIM不使用OpenDKIM。當然,opendkim偵聽端口:

tcp 0 0 127.0.0.1:8891 0.0.0.0:* LISTEN 6663/opendkim 

當我發送郵件fromlocal主機外:

2017-09-15 15:53:20 1dsr3M-0005fK-Ul <= [email protected] H=localhost [127.0.0.1] P=smtp S=341 
2017-09-15 15:53:21 1dsr3M-0005fK-Ul => [email protected] R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [74.125.133.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes K C="250 2.0.0 OK o1si854413wrg.487 - gsmtp" 
2017-09-15 15:53:21 1dsr3M-0005fK-Ul Completed 

爲什麼不叫進出口守護進程的OpenDKIM接口?

感謝您的幫助!

+0

FYI:進出口母鹿不需要OpenDKIM在所有的簽名過程;實際上,您不需要保持OpenDKIM運行。不過,仍然適用於生成密鑰對。 – DaSourcerer

回答

0

我解決了!
我必須添加一個「dkim_sign_headers」變量配置文件...

remote_smtp: 
    driver = smtp 
    dkim_domain = $sender_address_domain 
    dkim_selector = 20170915exim 
    dkim_private_key = ${if exists{/etc/opendkim/keys/$dkim_domain/$dkim_selector}{/etc/opendkim/keys/$dkim_domain/$dkim_selector}{0}} 
    dkim_canon = relaxed 
    dkim_strict = 0 
    dkim_sign_headers = subject:to:from