DKIM : installed ! but some questions

pppplus

Verified User
Joined
Dec 19, 2008
Messages
526
I success to install DKIM. Not so easy for beginner, and so much informations...

It looks to be easy, with simple explanations...

If you have exim 4.7 or more, there is nothing to install ! Just configure DKIM as write below.
Else update exim... (here : http://directadmin.com/forum/showthread.php?t=36644)

To configure DKIM I follow this : http://www.devco.net/archives/2010/05/14/dkim_with_centos_5_and_exim.php
(Note, I do it on debian4 also)
Read this document for more explanations, it explains used values.


Modifications in /etc/exim.conf
1/ in top of /etc/exim.conf
Code:
DKIM_DOMAIN = ${lc:${domain:$h_from:}}
DKIM_FILE = /etc/exim/dkim/${lc:${domain:$h_from:}}.pem
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
=> I do not have /etc/exim, so I write (but you can make /exim directory)
Code:
DKIM_FILE = /etc/dkim/${lc:${domain:$h_from:}}.pem

2/ Find
Code:
remote_smtp:
  driver = smtp
And replace by
Code:
remote_smtp:
  driver = smtp
  dkim_domain = DKIM_DOMAIN
  dkim_selector = x
  dkim_private_key = DKIM_PRIVATE_KEY
  dkim_canon = relaxed
  dkim_strict = 0

3/ execute (create folder to store dkim keys and generate key for one domain)
do not forgot to replace example.com by your domain !
Code:
mkdir /etc/exim/dkim/ && cd /etc/exim/dkim/
$ openssl genrsa -out example.com.pem 768 
$ openssl rsa -in example.com.pem -out example.com-public.pem -pubout -outform PEM
Because I do not have /etc/exim, I do
Code:
mkdir /etc/dkim/ && cd /etc/dkim/

4/ add value to TXT DNS for your domain
do not forgot to replace example.com by your domain !
do not forgot to replace <snip> ! => p= put here, the public key in YOURDOMAIN-public.pem
Code:
x._domainkey     IN      TXT     "v=DKIM1\; t=y\; k=rsa\; p=MIGfMA0[COLOR="Sienna"]<snip>[/COLOR]AQAB"
_domainkey       IN      TXT     "t=y\; o=~\;"


NOW, my questions
1st : I test with [email protected]
It it is ok, you will have
DKIM : pass

2nd : is it possible to generate DKIM and add TXT values for each domain, but not manually ?

3rd : these modifications are just for outgoing email. I read something for incoming emails, but do not understand.
url : http://mikepultz.com/2010/02/using-dkim-in-exim/
Code:
acl_check_dkim:

	#
	# check the DKIM signature for gmail
	#
	deny 	message 	= Common guys, what's going on?
		sender_domains 	= gmail.com
		dkim_signers 	= gmail.com
		dkim_status 	= none:invalid:fail

	accept
Why gmail.com ?
What else for all other senders ?

Hope my thread will be usefull for other beginners.
Thanks for your help to my questions
 
Last edited:
New problem :mad:

Now, I have this :
2.5 HEAD_LONG Message headers are very long


Because of DKIM signature, headers are too long.
Searching for solution, not found... :(
 
Back
Top