Admin: New page: ==WHY== Because one mail server can host multiple domains and you want it to sign it for all/some domains, not only one ! Google in fact only accepts mail from me if I sign them ! I assum...

2010-02-24T08:57:43Z

New page: ==WHY== Because one mail server can host multiple domains and you want it to sign it for all/some domains, not only one ! Google in fact only accepts mail from me if I sign them ! I assum...

New page

==WHY==

Because one mail server can host multiple domains and you want it to sign it for all/some domains, not only one ! Google in fact only accepts mail from me if I sign them ! I assume you already have it set up for 1 domain and have the knowledge to edit files and read configs. An important useful also is ABILITY TO GOOGLE !

==HOW==

<source lang="bash">
/etc/mail/dkim-filter # Because here is where I store my certs
# Generate a new key for a new domain
/usr/bin/dkim-genkey -r -s mydkim -D /etc/mail/dkim-filter -d mydomain1.com # you should now have a "default.txt" and a "default.private" file
mv mydkim.txt mydkim.mydomain1.com.txt # so we have it later too, this is the stuff we publish in named's zone file !
</source>

Also, add these lines to your domains zone file

<source lang="bash">
_adsp._domainkey TXT "dkim=all"
_ssp._domainkey IN TXT "t=y; dkim=unknown"
</source>

Also do this to find out your keylist file !

<source lang="bash">
grep -i keylist /path/to/your/dkim-filter.conf
</source>

Mine is "KeyList /etc/mail/dkim-filter/keylist" so I set this up:

<source lang="bash">
mv /etc/mail/dkim-filter/mydkim.private /etc/mail/dkim-filter/keys/mydomain1.com/mydkim
*@mydomain1.com:d3xt3r01.tk:/etc/mail/dkim-filter/keys/mydomain1.com/mydkim
</source>

Be sure to have this in your main.cf
<source lang="bash">
#don't forget to check dkim-filter.conf for the sock file path !
smtpd_milters = unix:/var/run/dkim-filter/dkim-filter.sock
non_smtpd_milters = unix:/var/run/dkim-filter/dkim-filter.sock
</source>

Restart dkim and postfix and be done with it !

<source lang="bash">
/etc/init.d/postfix restart
/etc/init.d/dkim-filter restart
</source>

[[Category: DKIM]]
[[Category: Postfix]]

DKIM for Multiple Domains - Revision history

Admin: New page: ==WHY== Because one mail server can host multiple domains and you want it to sign it for all/some domains, not only one ! Google in fact only accepts mail from me if I sign them ! I assum...