{"id":49,"date":"2012-04-25T05:50:00","date_gmt":"2012-04-25T05:50:00","guid":{"rendered":"http:\/\/pheonixsolutions.com\/?p=49"},"modified":"2016-06-24T17:10:48","modified_gmt":"2016-06-24T11:40:48","slug":"install-dkim-in-postfix-using-opendkim","status":"publish","type":"post","link":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/","title":{"rendered":"Install DKIM in Postfix using openDKIM"},"content":{"rendered":"
1. Install prerequisites===========
\nyum install sendmail-devel openssl-devel
\n===========2. Install OpenDKIM<\/p>\n

Download then extract OpenDKIM. Change to the extracted directory and run configure, make and then, as root, make install.<\/p>\n

===========
\nwget http:\/\/downloads.sourceforge.net\/project\/opendkim\/opendkim-2.4.2.tar.gz
\ntar -zxf opendkim-2.4.2.tar.gz
\ncd opendkim*
\n.\/configure
\nmake && make install
\n===========<\/p>\n

3. Post install steps<\/p>\n

Create a Linux user for OpenDKIM, then make some directories to store your keys and config files in.<\/p>\n

============
\nuseradd -s \/sbin\/nologin -b \/var\/run\/opendkim opendkim-milt
\nmkdir \/etc\/mail\/dkim
\nmkdir \/etc\/mail\/dkim\/keys
\nchown -R opendkim-milt:opendkim-milt \/etc\/mail\/dkim
\nchmod -R go-wrx \/etc\/mail\/dkim\/keys
\n============<\/p>\n

4.Check for startup script (\/etc\/init.d\/opendkim). If not present, use this:<\/p>\n

==============
\n#!\/bin\/bash
\n#
\n# opendkim\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Start and stop opendkim.<\/p>\n

# chkconfig: – 41 61
\n# description: opendkim
\n# processname: opendkim
\n# pidfile: \/var\/run\/opendkim\/dkim-milter.pid<\/p>\n

### BEGIN INIT INFO
\n# Provides: opendkim
\n# Required-Start: opendkim
\n# Required-Stop: opendkim
\n# Short-Description: Start and stop OpenDKIM
\n# Description: DKIM milter
\n### END INIT INFO<\/p>\n

# Adapted from Andrew Colin Kissa’sscript for dkim-milter – 28-05-2009<\/p>\n

. \/etc\/rc.d\/init.d\/functions<\/p>\n

DAEMON=\/usr\/local\/sbin\/opendkim
\nRETVAL=0
\nPID_FILE=\/var\/run\/opendkim\/dkim-milter.pid<\/p>\n

start() {
\necho -n $”Starting DKIM milter: ”
\ndaemon $DAEMON -x \/etc\/opendkim.conf
\nRETVAL=$?
\n[ $RETVAL -eq 0 ] && touch \/var\/lock\/subsys\/opendkim
\necho
\nreturn $RETVAL
\n}<\/p>\n

stop() {
\necho -n $”Stopping DKIM milter: ”
\nkillproc -p $PID_FILE
\nRETVAL=$?
\necho
\n[ $RETVAL -eq 0 ] && rm -f \/var\/lock\/subsys\/opendkim
\nreturn $RETVAL
\n}<\/p>\n

restart() {
\nstop
\nstart
\n}<\/p>\n

case “$1″ in
\nstart)
\nstart
\n;;
\nstop)
\nstop
\n;;
\nrestart)
\nrestart
\n;;
\nstatus)
\nstatus -p $PID_FILE
\n;;
\ncondrestart)
\n[ -f \/var\/lock\/subsys\/opendkim ] && restart || :
\n;;
\n*)
\necho $”Usage: $0 {start|stop|status|reload|restart|condrestart}”
\nexit 1
\nesac<\/p>\n

exit $?
\n==============<\/p>\n

4. Generating keys for DKIM signing<\/p>\n

You will need to generate a pair of keys for each domain you want to sign mail for, a public and a private key. OpenDKIM has a script included that will help do this. Where the keys are kept is up to you but here we create a directory inside \/etc\/mail\/dkim\/keys\u00e2\u20ac\u00a6<\/p>\n

============
\nmkdir \/etc\/mail\/dkim\/keys\/example.com
\nopendkim-genkey.sh -D \/etc\/mail\/dkim\/keys\/example.com\/ -d example.com -s default
\nchown -R opendkim-milt:opendkim-milt \/etc\/mail\/dkim\/example.com
\nmv \/etc\/mail\/dkim\/keys\/example.com\/default.private \/etc\/mail\/dkim\/keys\/example.com\/default
\n============<\/p>\n

 <\/p>\n

1. Install prerequisites<\/p>\n

===========
\nyum install sendmail-devel openssl-devel
\n===========<\/p>\n

2. Install OpenDKIM<\/p>\n

Download then extract OpenDKIM. Change to the extracted directory and run configure, make and then, as root, make install<\/p>\n

============
\nwget http:\/\/downloads.sourceforge.net\/project\/opendkim\/opendkim-2.4.2.tar.gz
\ntar -zxf opendkim-2.4.2.tar.gz
\ncd opendkim*
\n.\/configure
\nmake && make install
\n============<\/p>\n

3. Post install steps<\/p>\n

Create a Linux user for OpenDKIM, then make some directories to store your keys and config files in.<\/p>\n

==========
\nuseradd -s \/sbin\/nologin -b \/var\/run\/opendkim opendkim-milt
\nmkdir \/etc\/mail\/dkim
\nmkdir \/etc\/mail\/dkim\/keys
\nchown -R opendkim-milt:opendkim-milt \/etc\/mail\/dkim
\nchmod -R go-wrx \/etc\/mail\/dkim\/keys
\n==========<\/p>\n

Check for startup script (\/etc\/init.d\/opendkim). If not present, use this:<\/p>\n

============
\n#!\/bin\/bash
\n#
\n# opendkim\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Start and stop opendkim.<\/p>\n

# chkconfig: – 41 61
\n# description: opendkim
\n# processname: opendkim
\n# pidfile: \/var\/run\/opendkim\/dkim-milter.pid<\/p>\n

### BEGIN INIT INFO
\n# Provides: opendkim
\n# Required-Start: opendkim
\n# Required-Stop: opendkim
\n# Short-Description: Start and stop OpenDKIM
\n# Description: DKIM milter
\n### END INIT INFO<\/p>\n

# Adapted from Andrew Colin Kissa’sscript for dkim-milter – 28-05-2009<\/p>\n

. \/etc\/rc.d\/init.d\/functions<\/p>\n

DAEMON=\/usr\/local\/sbin\/opendkim
\nRETVAL=0
\nPID_FILE=\/var\/run\/opendkim\/dkim-milter.pid<\/p>\n

start() {
\necho -n $”Starting DKIM milter: ”
\ndaemon $DAEMON -x \/etc\/opendkim.conf
\nRETVAL=$?
\n[ $RETVAL -eq 0 ] && touch \/var\/lock\/subsys\/opendkim
\necho
\nreturn $RETVAL
\n}<\/p>\n

stop() {
\necho -n $”Stopping DKIM milter: ”
\nkillproc -p $PID_FILE
\nRETVAL=$?
\necho
\n[ $RETVAL -eq 0 ] && rm -f \/var\/lock\/subsys\/opendkim
\nreturn $RETVAL
\n}<\/p>\n

restart() {
\nstop
\nstart
\n}<\/p>\n

case “$1″ in
\nstart)
\nstart
\n;;
\nstop)
\nstop
\n;;
\nrestart)
\nrestart
\n;;
\nstatus)
\nstatus -p $PID_FILE
\n;;
\ncondrestart)
\n[ -f \/var\/lock\/subsys\/opendkim ] && restart || :
\n;;
\n*)
\necho $”Usage: $0 {start|stop|status|reload|restart|condrestart}”
\nexit 1
\nesac<\/p>\n

exit $?
\n============<\/p>\n

4. Generating keys for DKIM signing<\/p>\n

You will need to generate a pair of keys for each domain you want to sign mail for, a public and a private key. OpenDKIM has a script included that will help do this. Where the keys are kept is up to you but here we create a directory inside \/etc\/mail\/dkim\/keys\u00e2\u20ac\u00a6<\/p>\n

===========
\nmkdir \/etc\/mail\/dkim\/keys\/example.com
\nopendkim-genkey.sh -D \/etc\/mail\/dkim\/keys\/example.com\/ -d example.com -s default
\nchown -R opendkim-milt:opendkim-milt \/etc\/mail\/dkim\/example.com
\nmv \/etc\/mail\/dkim\/keys\/example.com\/default.private \/etc\/mail\/dkim\/keys\/example.com\/default
\n===========<\/p>\n

\u00e2\u20ac\u02dc-s\u00e2\u20ac\u2122 is the selector, here I have used default, you can use anything like mail or dk or dkim or sample.<\/p>\n

5. OpenDKIM configuration<\/p>\n

We need to edit one config file and create two \u00e2\u20ac\u02dctable\u00e2\u20ac\u2122 files that the OpenDKIM milter will use to know what to do with the mails.<\/p>\n

Edit \/etc\/opendkim.conf<\/p>\n

These options should work:<\/p>\n

==================
\n##
\n## opendkim.conf — configuration file for OpenDKIM filter
\n##
\n## $Id: opendkim.conf.sample,v 1.5 2010\/03\/05 03:32:12 mmarkley Exp $
\n##
\n#ADSPDiscard\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nADSPNoSuchDomain\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nAutoRestart\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nAutoRestartRate\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 10\/1h
\nCanonicalization\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 relaxed\/relaxed
\nKeyTable\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 refile:\/etc\/mail\/opendkim\/keyTable
\nLogWhy\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nOn-Default\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 reject
\nOn-BadSignature\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 reject
\nOn-DNSError\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 tempfail
\nOn-InternalError\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 accept
\nOn-NoSignature\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 accept
\nOn-Security\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 discard
\nPidFile\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 \/var\/run\/opendkim\/dkim-milter.pid
\nSignatureAlgorithm\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 rsa-sha256
\nSigningTable\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 refile:\/etc\/mail\/opendkim\/signingTable
\nSocket\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 inet:20209@localhost
\nSyslog\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nSyslogSuccess\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\nTemporaryDirectory\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 \/var\/tmp
\nUMask\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 022
\nUserID\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 opendkim-milt:opendkim-milt
\nX-Header\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 Yes
\n==================<\/p>\n

ii) \/etc\/mail\/opendkim\/signingTable<\/p>\n

This table is used to select one or more signatures to apply to a message based on the address found in the From: header field. Keys in this table vary depending on the type of table used; values in this data set should include one field that contains a name found in the KeyTable that identifies which key should be used in generating the signature, and an optional second field naming the signer of the message that will be included in the “i=” tag in the generated signature.<\/p>\n

If the first field contains only a “%” character, it will be replaced by the domain found in the From: header field. Similarly, within the optional second field, any “%” character will be replaced by the domain found in the From: header field.<\/p>\n

If this table specifies a regular expression file (“refile”), then the keys are wildcard patterns that are matched against the address found in the From: header field. Entries are checked in the order in which they appear in the file.<\/p>\n

For all other database types, the full user@host is checked first, then simply host, then user@.domain (with all superdomains checked in sequence, so “foo.example.com” would first check “user@foo.example.com”, then “user@.example.com”, then “user@.com”), then .domain, then user@*, and finally *.<\/p>\n

In any case, only the first match is applied, unless MultipleSignatures is enabled in which case all matches are applied.<\/p>\n

A working signingTable will look like this:<\/p>\n

————–
\n$ cat \/etc\/mail\/opendkim\/signingTable
\n*@espserv.com mail._domainkey.example.com
\n*@joseairosa.com mail._domainkey.example1.com
\n*@porvocacao.com mail._domainkey.example2.com
\n————–<\/p>\n

6. Postfix configuration<\/p>\n

Add these to postfix’s main.cf file:<\/p>\n

============
\nsmtpd_milters\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 = inet:localhost:20209
\nnon_smtpd_milters\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 = inet:localhost:20209
\nmilter_protocol\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 = 2
\nmilter_default_action\u00c2\u00a0\u00c2\u00a0 = accept
\n============<\/p>\n

You can change the port if required. Reload postfix.<\/p>\n

7. DKIM DNS entries<\/p>\n

When you created the keys few steps back, you should have got two files, one the private key and the other a public key. Open the public key file and add the contents to your domain’s DNS.<\/p>\n

=============
\n$ cat mail.txt
\nmail._domainkey IN TXT “v=DKIM1; r=postmaster; g=*; k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNSFbbde\/56vjZfTYRXe0w8J44fPmBwZgoIZsGfYFgQxCFKJ50NL2EVWGey9pWw+YrJEfec3nTlbcquxnmm92y7vsWM9B7sCyoYQIweepJBdkJ3boJXBlm3eXMqrOMJfYmqjn51Y5B0kuErgu\/N41S1Cr3\/BtQU3\/QZL0qnXi+6wIDAQAB”
\n=============<\/p>\n

While adding make sure that you remove the “r=postmaster” tag. This tag is still experimental and is not supported globally.<\/p>\n

Finally add a DKIM ADSP record which should look something like this:<\/p>\n

———-
\n_adsp._domainkey.example.com\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 IN\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 TXT\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 “dkim=unknown”
\n———-<\/p>\n

8. Start OpenDKIM<\/p>\n

=======
\nservice opendkim start
\n=======<\/p>\n

9. Add it to chkconfig so that openDKIM starts automatically on boot.<\/p>\n

=======
\nchkconfig –level 2345 opendkim on
\n=======<\/p>\n

10. Test. Send a mail to check-auth-username=gmail.com@verifier.port25.com. You will get the authentication results in username@gmail’s inbox.<\/p>\n

Use the following command to test and check if opendkim is being called by postfix or not.<\/p>\n

==========
\necho Test | mail -s test check-auth-username=gmail.com@verifier.port25.com ;tail -fn0 \/var\/log\/maillog
\n==========<\/p>\n

———————————
\nOct\u00c2\u00a0 6 00:31:59 smtp01 sendmail[4579]: p964Vw7R004579: from=root, size=82, class=0, nrcpts=1, msgid=, relay=root@localhost
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/smtpd[4581]: connect from localhost.localdomain[127.0.0.1]
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/smtpd[4581]: setting up TLS connection from localhost.localdomain[127.0.0.1]
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/smtpd[4581]: Anonymous TLS connection established from localhost.localdomain[127.0.0.1]: TLSv1 with cipher DHE-RSA-AES256-SHA (256\/256 bits)
\nOct\u00c2\u00a0 6 00:31:59 smtp01 sendmail[4579]: STARTTLS=client, relay=[127.0.0.1], version=TLSv1\/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256\/256
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/smtpd[4581]: 36AD1B103: client=localhost.localdomain[127.0.0.1], sasl_sender=root@servername.com
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/cleanup[4584]: 36AD1B103: message-id=
\n[b]Oct\u00c2\u00a0 6 00:31:59 smtp01 opendkim[4486]: 36AD1B103: DKIM-Signature header added (s=mail, d=domainname.com)[\/b]
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/qmgr[3136]: 36AD1B103: from=, size=788, nrcpt=1 (queue active)
\nOct\u00c2\u00a0 6 00:31:59 smtp01 sendmail[4579]: p964Vw7R004579: to=check-auth-username=gmail.com@verifier.port25.com, ctladdr=root (0\/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30082, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (Ok: queued as 36AD1B103)
\nOct\u00c2\u00a0 6 00:31:59 smtp01 postfix\/smtpd[4581]: disconnect from localhost.localdomain[127.0.0.1]
\nOct\u00c2\u00a0 6 00:32:01 smtp01 postfix\/smtp[4585]: 36AD1B103: to=, relay=verifier.port25.com[96.244.219.19]:25, delay=2, delays=0.09\/0.01\/1.5\/0.3, dsn=2.6.0, status=sent (250 2.6.0 message received)
\nOct\u00c2\u00a0 6 00:32:01 smtp01 postfix\/qmgr[3136]: 36AD1B103: removed
\n———————————<\/p>\n

Check you inbox for the authentication results. You should get the following:<\/p>\n

==========================================================
\nSummary of Results
\n==========================================================
\n…
\nDKIM check:\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 pass
\n…
\n==========================================================
\nDetails:
\n==========================================================
\n…
\n———————————————————-
\nDKIM check details:
\n———————————————————-
\nResult:\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 pass (signature verifies; identity doesn’t match any headers)
\nID(s) verified: header.d=domainname.com
\nCanonicalized Headers:
\ndate:Thu,’20’6’20’Oct’20’2011’20’00:31:58’20’-0400’0D”0A’
\nfrom:root’20”0D”0A’
\nmessage-id:’0D”0A’
\nto:check-auth-username=gmail.com@verifier.port25.com’0D”0A’
\nsubject:test’0D”0A’
\ndkim-signature:v=1;’20’a=rsa-sha256;’20’c=relaxed\/relaxed;’20’d=domainname.com;’20’s=mail;’20’t=1317875519;’20’bh=fdkeB\/A0FkbVP2k4J4pNPoeWH6vqBm9+b0C3OY87Cw8=;’20’h=Date:From:Message-Id:To:Subject;’20’b=<\/p>\n

Canonicalized Body:
\nTest’0D”0A’<\/p>\n

DNS record(s):
\nmail._domainkey.domainname.com. 1800 IN TXT “v=DKIM1; g=*; k=rsa; t=y; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA1X6GKfaUhV3jthv32C5lo\/V3\/4yOys9CsZZByYId2NJnfRWiZroEozl6\/4XyQhdb2JPNMRT8xcWd+RqSRfyszb9DzlEhfk4q0PpP7QFhtEzpUVSGrsNiSutkY56JkoQRblrrbrKUNgu5U0GTaFuNUnpj2\/kHmEeIGcCk9we9eQIDAQAB”<\/p>\n

NOTE: DKIM checking has been performed based on the latest DKIM specs
\n(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
\nolder versions.\u00c2\u00a0 If you are using Port25’s PowerMTA, you need to use
\nversion 3.2r11 or later to get a compatible version of DKIM.<\/p>\n

———————————————————-<\/p>\n

If you receive the above results, all is good.<\/p>\n

11. You can automate the key generation and setting up permissions on keys using this script.<\/p>\n

==================
\n#!\/bin\/bash
\nread -p “Enter your domain name : ” domain_name
\nif [ -f $domain_name ];
\nthen
\necho “Enter valid domain name”
\nelse
\nif [ -d \/etc\/mail\/opendkim\/keys\/$domain_name ];
\nthen
\necho “Domain already added”
\nelse
\nmkdir \/etc\/mail\/opendkim\/keys\/$domain_name
\necho -e “Generating key……\\n”<\/p>\n

opendkim-genkey -d $domain_name -s mail -t -D \/etc\/mail\/opendkim\/keys\/$domain_name\/
\nchown -R opendkim-milt \/etc\/mail\/opendkim\/keys\/$domain_name
\ncp \/etc\/mail\/opendkim\/keyTable \/etc\/mail\/opendkim\/keyTable_bak_before_$domain_name
\necho “mail._domainkey.$domain_name $domain_name:mail:\/etc\/mail\/opendkim\/keys\/$domain_name\/mail.private” >> \/etc\/mail\/opendkim\/keyTable
\necho “*@$domain_name mail._domainkey.$domain_name” >> \/etc\/mail\/opendkim\/signingTable
\necho -e “Restarting opendkim………\\n”
\n\/etc\/init.d\/opendkim restart
\necho -e “\\nAdd the following public key in the domains DNS zone file \\n”
\necho -e “\\n=============================”
\necho `cat \/etc\/mail\/opendkim\/keys\/$domain_name\/mail.txt|sed ‘s\/r\\=postmaster\\;\/\/g’`
\necho “=============================”
\nfi
\nfi
\n==================<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

1. Install prerequisites=========== yum install sendmail-devel openssl-devel ===========2. Install OpenDKIM Download then extract OpenDKIM. Change to the extracted directory and run configure, make and then, as root, make install. =========== wget http:\/\/downloads.sourceforge.net\/project\/opendkim\/opendkim-2.4.2.tar.gz tar -zxf opendkim-2.4.2.tar.gz cd opendkim* .\/configure make && make install =========== 3. Post install steps Create a Linux… Continue Reading Install DKIM in Postfix using openDKIM<\/span><\/i><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[202,201,203,171],"class_list":{"0":"post-49","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"hentry","6":"category-uncategorized","7":"tag-dkim","8":"tag-domainkeys","9":"tag-installation","10":"tag-postfix","11":"h-entry","13":"h-as-article"},"yoast_head":"\nPheonix Solutions - We Empower Your Business Growth<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pheonix Solutions - We Empower Your Business Growth\" \/>\n<meta property=\"og:description\" content=\"1. Install prerequisites=========== yum install sendmail-devel openssl-devel ===========2. Install OpenDKIM Download then extract OpenDKIM. Change to the extracted directory and run configure, make and then, as root, make install. =========== wget http:\/\/downloads.sourceforge.net\/project\/opendkim\/opendkim-2.4.2.tar.gz tar -zxf opendkim-2.4.2.tar.gz cd opendkim* .\/configure make && make install =========== 3. Post install steps Create a Linux… Continue Reading Install DKIM in Postfix using openDKIM\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/\" \/>\n<meta property=\"og:site_name\" content=\"PHEONIXSOLUTIONS\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/PheonixSolutions-209942982759387\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-04-25T05:50:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-06-24T11:40:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2016\/09\/PX2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"3837\" \/>\n\t<meta property=\"og:image:height\" content=\"2540\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@pheonixsolution\" \/>\n<meta name=\"twitter:site\" content=\"@pheonixsolution\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#\\\/schema\\\/person\\\/0ffa33d73c869faec2d50e79c24e3503\"},\"headline\":\"Install DKIM in Postfix using openDKIM\",\"datePublished\":\"2012-04-25T05:50:00+00:00\",\"dateModified\":\"2016-06-24T11:40:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/\"},\"wordCount\":1974,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#organization\"},\"keywords\":[\"DKIM\",\"Domainkeys\",\"installation\",\"Postfix\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/\",\"url\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/\",\"name\":\"Pheonix Solutions - We Empower Your Business Growth\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#website\"},\"datePublished\":\"2012-04-25T05:50:00+00:00\",\"dateModified\":\"2016-06-24T11:40:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/install-dkim-in-postfix-using-opendkim\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Install DKIM in Postfix using openDKIM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/\",\"name\":\"Pheonix Solutions\",\"description\":\"We Empower Your Business Growth\",\"publisher\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#organization\",\"name\":\"PheonixSolutions\",\"url\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/12\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/12\\\/logo.png\",\"width\":454,\"height\":300,\"caption\":\"PheonixSolutions\"},\"image\":{\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/PheonixSolutions-209942982759387\\\/\",\"https:\\\/\\\/x.com\\\/pheonixsolution\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/#\\\/schema\\\/person\\\/0ffa33d73c869faec2d50e79c24e3503\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\\\/\\\/blog.pheonixsolutions.com\"],\"url\":\"https:\\\/\\\/pheonixsolutions.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pheonix Solutions - We Empower Your Business Growth","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/","og_locale":"en_US","og_type":"article","og_title":"Pheonix Solutions - We Empower Your Business Growth","og_description":"1. Install prerequisites=========== yum install sendmail-devel openssl-devel ===========2. Install OpenDKIM Download then extract OpenDKIM. Change to the extracted directory and run configure, make and then, as root, make install. =========== wget http:\/\/downloads.sourceforge.net\/project\/opendkim\/opendkim-2.4.2.tar.gz tar -zxf opendkim-2.4.2.tar.gz cd opendkim* .\/configure make && make install =========== 3. Post install steps Create a Linux… Continue Reading Install DKIM in Postfix using openDKIM","og_url":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/","og_site_name":"PHEONIXSOLUTIONS","article_publisher":"https:\/\/www.facebook.com\/PheonixSolutions-209942982759387\/","article_published_time":"2012-04-25T05:50:00+00:00","article_modified_time":"2016-06-24T11:40:48+00:00","og_image":[{"width":3837,"height":2540,"url":"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2016\/09\/PX2.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_creator":"@pheonixsolution","twitter_site":"@pheonixsolution","twitter_misc":{"Written by":"admin","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/#article","isPartOf":{"@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/"},"author":{"name":"admin","@id":"https:\/\/pheonixsolutions.com\/blog\/#\/schema\/person\/0ffa33d73c869faec2d50e79c24e3503"},"headline":"Install DKIM in Postfix using openDKIM","datePublished":"2012-04-25T05:50:00+00:00","dateModified":"2016-06-24T11:40:48+00:00","mainEntityOfPage":{"@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/"},"wordCount":1974,"commentCount":0,"publisher":{"@id":"https:\/\/pheonixsolutions.com\/blog\/#organization"},"keywords":["DKIM","Domainkeys","installation","Postfix"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/","url":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/","name":"Pheonix Solutions - We Empower Your Business Growth","isPartOf":{"@id":"https:\/\/pheonixsolutions.com\/blog\/#website"},"datePublished":"2012-04-25T05:50:00+00:00","dateModified":"2016-06-24T11:40:48+00:00","breadcrumb":{"@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/pheonixsolutions.com\/blog\/install-dkim-in-postfix-using-opendkim\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pheonixsolutions.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Install DKIM in Postfix using openDKIM"}]},{"@type":"WebSite","@id":"https:\/\/pheonixsolutions.com\/blog\/#website","url":"https:\/\/pheonixsolutions.com\/blog\/","name":"Pheonix Solutions","description":"We Empower Your Business Growth","publisher":{"@id":"https:\/\/pheonixsolutions.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pheonixsolutions.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pheonixsolutions.com\/blog\/#organization","name":"PheonixSolutions","url":"https:\/\/pheonixsolutions.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pheonixsolutions.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2016\/12\/logo.png","contentUrl":"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2016\/12\/logo.png","width":454,"height":300,"caption":"PheonixSolutions"},"image":{"@id":"https:\/\/pheonixsolutions.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/PheonixSolutions-209942982759387\/","https:\/\/x.com\/pheonixsolution"]},{"@type":"Person","@id":"https:\/\/pheonixsolutions.com\/blog\/#\/schema\/person\/0ffa33d73c869faec2d50e79c24e3503","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09bacc0294abee1322a23ab4bc6a0330dd4cb4df707dc9d0b0efeba6c109608b?s=96&r=g","caption":"admin"},"sameAs":["http:\/\/blog.pheonixsolutions.com"],"url":"https:\/\/pheonixsolutions.com\/blog\/author\/admin\/"}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p7F4uM-N","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/49","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=49"}],"version-history":[{"count":0,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/49\/revisions"}],"wp:attachment":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=49"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=49"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=49"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}