Postfix

From Jan's Wiki
Jump to navigation Jump to search

DKIM with OpenDKIM[edit | edit source]

Create new signing key

   opendkim-genkey -D /var/db/dkim -d conti.work -s mail

Add domain to /var/db/dkim/opendkim-signingingtable

   conti.work mail._domainkey.conti.work

Add key to /var/db/dkim/opendkim-keytable

   mail._domainkey.conti.work conti.work:mail:/var/db/dkim/mail.private

Add TXT record to DNS

   cat /var/db/dkim/mail.txt
   
   mail._domainkey IN      TXT     ( "v=DKIM1; k=rsa; "
             "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeKDcrLhvbX0DoeRuX5b9gx84jyU4oBgMIzf1n4VSo4NUQOEjP63rwGZd4sAsSbm7tcNoc7sUtoj7k7euC9H6xvSCYyewxva7FdJuBH6gbHvMJbl5k9pXnWvDUsovYRHTqXqWL0Ecf8ic9K+vLlCLVac9+3aS31djobJt2CVqeRwIDAQAB" )  ; ----- DKIM key mail for conti.work

Add milter to postfix

   smtpd_milters = unix:/var/run/milteropendkim/opendkim.socket
   milter_default_action = accept

Disable CatchAll for certain addresses[edit | edit source]

Although catch all is active some addresses can be disabled by adding

      check_recipient_access hash:/etc/postfix/access,

to the smtp_recipient_restrictions . Access file has

   rejected@riechers.info REJECT

[1]


checking the mail queue[edit | edit source]

  mailq
  postcat -q <queueid>
  To Delete:  postsuper -d <queueid>