{"id":2439,"date":"2017-10-06T15:11:19","date_gmt":"2017-10-06T15:11:19","guid":{"rendered":"https:\/\/tst-amo.pp.ua\/blog\/?p=2439"},"modified":"2018-03-01T17:20:50","modified_gmt":"2018-03-01T17:20:50","slug":"dkim-bind-postfixexim","status":"publish","type":"post","link":"https:\/\/tst-amo.net.ua\/blog\/?p=2439","title":{"rendered":"DKIM (BIND, Postfix\/Exim)"},"content":{"rendered":"<h4>\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442.<\/h4>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439:<\/p>\n<pre>mkdir \/etc\/opendkim<\/pre>\n<p>\u0413\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0438\u0445:<\/p>\n<pre>opendkim-genkey -D \/etc\/opendkim\/ --domain tst-amo.net.ua --selector\u00a0relay<\/pre>\n<p><em>relay<\/em> &#8211; \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u043b\u0435\u043a\u0442\u043e\u0440\u0430 (\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043b\u044e\u0431\u044b\u043c \u043d\u0430\u043f\u0440. &#8211; <em>mail<\/em>)<\/p>\n<p>\u0421\u043e\u0437\u0434\u0430\u043b\u043e\u0441\u044c \u0434\u0432\u0430 \u0444\u0430\u0439\u043b\u0430 &#8211; <em>*.private<\/em> &#8211; \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 (\u0445\u0440\u0430\u043d\u0438\u043c \u0443 \u0441\u0435\u0431\u044f), <em>*.txt<\/em> &#8211; \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u043b\u044f DNS.<\/p>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0443 opendkim:<\/p>\n<pre>pw useradd opendkim -m -s \/usr\/sbin\/nologin\u00a0-w no<\/pre>\n<p>\u0438 \u043c\u0435\u043d\u044f\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430:<\/p>\n<pre>chown :opendkim \/etc\/opendkim\/*\r\nchmod g+r \/etc\/opendkim\/*<\/pre>\n<h4>\u0412\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442.<\/h4>\n<pre>mkdir \/usr\/local\/etc\/exim\/dkim<\/pre>\n<h4>\u0414\u0435\u043b\u0430\u0435\u043c\u00a0\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0447\u0435\u0440\u0435\u0437 openssl<\/h4>\n<pre>root@server# openssl genrsa -out \/usr\/local\/etc\/exim\/example.com.key 2048<\/pre>\n<p>\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u0438\u043c\u0435\u0435\u043c \u043a\u043b\u044e\u0447 \u0432\u0438\u0434\u0430:<\/p>\n<pre>-----BEGIN RSA PRIVATE KEY----- \r\nMIICXQIBAAKBgQDT1tSzyG2Zch4LTgGPbn\/8H535Vd+friNn\/gBsV7rFNVZdxapD \r\ndOUzeATUTbAG\/3Ux7vJxYd6i982IajVz0b2dsmkdDzctC4EdJsLcpCpyf3x21nYZ \r\noJO2GjaFW65MNj7dU7BXDerLTE+zTu\/Q4vs4ZqCA39CtbmetjBS9l\/NsMQIDAQAB \r\nAoGBAM2ZyVFAatkQSBaiv\u0421LwlWknapSPgv4g7h5FSTXeI9i5frx+V1UnRDki+FTx \r\nnbH9CErRZh8jZQj4x1Pp+T0SyRtb62ydJooPYIpNlTt71cgZNwH174uFt4HevKmC \r\nMJIhzaufEZYhamS4NQOR+4FakdZX2T8yzuvwDwkplJP2tO\/tAkEA7RDltCTOShdd \r\nsJYs0wjs1mDXUiSz0giFAYvMBvOelpyjJl9Pi1A0CNcD4WdvAl0Xo5aRMVrTXRzf\u00a0\r\n-----END RSA PRIVATE KEY-----<\/pre>\n<h4>\u0413\u0435\u043d\u0435\u0440\u0438\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e<\/h4>\n<pre>root@server# openssl rsa -in \/usr\/local\/etc\/exim\/example.com.key -pubout<\/pre>\n<p>\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043c \u0447\u0442\u043e-\u0442\u043e \u0432\u0440\u043e\u0434\u0435:<\/p>\n<pre>-----BEGIN PUBLIC KEY----- \r\nMIGfMA0GCSqGSIb3DQEBAQUAA3GNADCBiQKBgQDT1tSzyG1Zch4LTgGPbn\/8H535 \r\nVd+friNn\/gBsV7rFNVZdxapDd0UzeATUTbAG\/3Ux7vJxYd6i982IajVz0b2dsmkd \r\nDzctC4EdJsLcpCpyf3x21nYZoJO2GjaFW65MNj7dU7BXDerLTE+zTu\/Q4vs4ZqCA\u00a0\r\n-----END PUBLIC KEY-----<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0432 DNS \u0437\u0430\u043f\u0438\u0441\u044c\u00a0<strong>relay<\/strong><b>._domainkey.example.com<\/b>\u00a0\u0442\u0438\u043f\u0430 TXT \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c:<\/p>\n<pre id=\"crayon-59d7aa6f192f8920109955-2\" class=\"crayon-line crayon-striped-line\"><span class=\"crayon-v\">mail<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">_domainkey<\/span><span class=\"crayon-sy\">.example.com<\/span><span class=\"crayon-cn\">.<\/span> <span class=\"crayon-st\">IN<\/span> <span class=\"crayon-e\">TXT<\/span> <span class=\"crayon-sy\">(<\/span> <span class=\"crayon-s\">\"k=rsa\\; \"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2WdcyOKgKVU2C\/7CV77\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"4mu\/b+XVaVixtuASB0wAOjaPnEcFzwI84hu6wmy8cpPJlVImnf1gD\/y\/pA08+viV\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"PPP\/6bHfEiJjxOSjDnhF2V1+GlOrl6IYxNxOxXPLw88QpDPak+ZO0yLU58UxJP1K\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"cPdCuftEMFHWd5vuiHquBNYtkW6MxaGcoX4hK8eE9CdrKDH7EtuLkkJ4uj0Mw4R7\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"kd6FexfyppDXFGGu8oDN+7IUfCqnKDkUxqb5Dh4rDD24Tn6KdDY5eFgjw7OIUr8H\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"Jbr9KNSE6lF3M5JLx9VX\/ny3ec9ODLm0FGpDQbXcRM+CTmX6H2jGkwJ4VcpqDwVZ\"<\/span>\r\n<span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-s\">\"RwIDAQAB\"<\/span> <span class=\"crayon-sy\">)<\/span><\/pre>\n<pre><\/pre>\n<p>(\u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u044d\u0442\u043e \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441 \u0434\u043b\u044f DNS \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 BIND, \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 DNS \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u043a \u201c\\\u201d \u0434\u043b\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u201c;\u201d.)<\/p>\n<p>\u0412\u043c\u0435\u0441\u0442\u043e\u00a0<b>relay<\/b>\u00a0\u043c\u043e\u0436\u0435\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0435\u043b\u0435\u043a\u0442\u043e\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0<b>dkim<\/b>,\u00a0<b>server<\/b>,\u00a0<b>public<\/b>\u00a0\u0438 \u0442\u0434. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Public key \u0434\u043b\u044f DKIM \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.<\/p>\n<p>\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043e\u0436\u0434\u0430\u0442\u044c\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0430\u0448\u0430 DNS \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432.<\/p>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0441\u0432\u043e\u044e DKIM \u0437\u0430\u043f\u0438\u0441\u044c \u043c\u043e\u0436\u043d\u043e, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u00a0<a href=\"http:\/\/www.dnswatch.info\/dns\/dnslookup?la=en&amp;host=mail1._domainkey.example.com&amp;type=TXT&amp;submit=Resolve\">DNSWatch<\/a><\/p>\n<h4>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c ADSP \u0437\u0430\u043f\u0438\u0441\u044c<\/h4>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0432 DNS \u0437\u0430\u043f\u0438\u0441\u044c\u00a0<b>_adsp._domainkey.example.com<\/b>\u00a0\u0442\u0438\u043f\u0430 TXT \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c\u00a0<b>dkim=all<\/b>.<\/p>\n<pre>_adsp._domainkey.example.com. IN TXT \"dkim=all\"<\/pre>\n<p>\u041f\u043e\u043c\u0438\u043c\u043e <strong>all<\/strong>\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 dkim \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0435\u0449\u0435 \u0434\u0432\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u2014 <strong>unknown<\/strong>\u00a0\u0438\u00a0<b>discardable<\/b>.<\/p>\n<ul>\n<li><b>unknown<\/b>\u00a0\u2014 \u0434\u043e\u043c\u0435\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043b\u0438 \u0432\u0441\u0435 \u043f\u0438\u0441\u044c\u043c\u0430.<\/li>\n<li><b>all<\/b>\u00a0\u2014 \u0432\u0441\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u044b.<\/li>\n<li><b>discardable<\/b>\u00a0\u2014 \u0432\u0441\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u044b. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0435\u0441\u043b\u0438 \u043f\u0438\u0441\u044c\u043c\u043e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u0431\u0435\u0437 \u0432\u0430\u043b\u0438\u0434\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u043f\u0443\u0442\u0438, \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0442\u044c \u0431\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0435\u043c\u0443 \u043a\u043b\u044e\u0447\u0443 \u0438\u043b\u0438 \u043f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c, \u0434\u043e\u043c\u0435\u043d \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u0430\u0434\u0440\u0435\u0441\u0430\u0442\u0430 \u043e\u0442\u043a\u043b\u043e\u043d\u0438\u0442\u044c \u0435\u0433\u043e.<\/li>\n<\/ul>\n<p>\u0420\u0435\u0441\u0442\u0430\u0440\u0442 BIND.<\/p>\n<h4>\u041f\u0440\u0430\u0432\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433 Exim<\/h4>\n<p>\u0412 \u0444\u0430\u0439\u043b\u00a0<i>\/usr\/local\/etc\/exim\/configure<\/i>\u00a0\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u043e:<\/p>\n<pre><code class=\"bash hljs\"><span class=\"hljs-comment\">## DKIM:\r\n<\/span><\/code>DKIM_DOMAIN = <span class=\"hljs-variable\">${lc:${domain:$h_from:}<\/span>} DKIM_FILE = \/usr\/<span class=\"hljs-built_in\">local<\/span>\/etc\/exim\/<span class=\"hljs-variable\">${lc:${domain:$h_from:}<\/span>}.key DKIM_PRIVATE_KEY = <span class=\"hljs-variable\">${if exists{DKIM_FILE}<\/span>{DKIM_FILE}{0}}<\/pre>\n<p>\u042d\u0442\u0430 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u044b\u0435 Private key \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432.<\/p>\n<p>\u041f\u043e\u0434\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u00a0<b>remote_smtp<\/b>:<\/p>\n<pre>remote_smtp:\r\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0driver           = smtp\r\n\u00a0 \u00a0 \u00a0 \u00a0  dkim_canon       = relaxed\r\n         #dkim_strict     = yes\r\n         dkim_domain      = DKIM_DOMAIN\r\n         dkim_selector    = relay\r\n         dkim_private_key = DKIM_PRIVATE_KEY<\/pre>\n<p>\u0417\u0434\u0435\u0441\u044c\u00a0<b>relay<\/b>\u00a0\u2014 \u043d\u0430\u0448 \u0441\u0435\u043b\u0435\u043a\u0442\u043e\u0440, .<\/p>\n<p>\u0421\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433 \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u0435\u0433\u043e:<\/p>\n<pre>root@server# service exim reload<\/pre>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c DNS \u0431\u0443\u0434\u0435\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b\u00a0<a href=\"https:\/\/ru.wikipedia.org\/wiki\/Dig\" target=\"_blank\" rel=\"noopener\">dig<\/a>, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c\u00a0<a href=\"http:\/\/www.dnswatch.info\/\" target=\"_blank\" rel=\"noopener\">http:\/\/www.dnswatch.info<\/a><\/p>\n<p><strong>\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e dig:<\/strong><\/p>\n<pre>dig relay._domainkey.example.com TXT\r\n.....\r\n<span class=\"crayon-sy\">;<\/span><span class=\"crayon-sy\">;<\/span> <span class=\"crayon-e\">ANSWER <\/span><span class=\"crayon-v\">SECTION<\/span><span class=\"crayon-o\">:<\/span>\r\n<span class=\"crayon-v\">relay<\/span><span class=\"crayon-e\">._domainkey<\/span><span class=\"crayon-sy\">.example.com<\/span><span class=\"crayon-cn\">.<\/span> <span class=\"crayon-cn\">3600<\/span> <span class=\"crayon-st\">IN<\/span><span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><span class=\"crayon-i\">TXT<\/span><span class=\"crayon-h\">\u00a0\u00a0\u00a0\u00a0 <\/span><span class=\"crayon-s\">\"k=rsa\\; \"<\/span> <span class=\"crayon-s\">\"p=MIIBIjA.......................<\/span>\r\n.....<\/pre>\n<p>\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0430\u0439\u0442\u0430 &#8211; \u0432 \u043e\u043a\u043e\u0448\u043a\u0435 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0442\u0438\u043f \u0437\u0430\u043f\u0438\u0441\u0438 <em>TXT<\/em> \u0438 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n<pre><span class=\"crayon-v\">relay<\/span><span class=\"crayon-e\">._domainkey<\/span><span class=\"crayon-sy\">.example.com<\/span><\/pre>\n<h3>Postfix<\/h3>\n<p>\u0420\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c:<\/p>\n<div class=\"console\" data-markered=\"true\">\n<pre>\/etc\/opendkim.conf<\/pre>\n<\/div>\n<p>\u0418 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u0435\u0433\u043e, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u0438\u0434\u0443:<\/p>\n<div class=\"editor\">\n<pre>AutoRestart \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Yes\r\nAutoRestartRate \u00a0 \u00a0 \u00a0 \u00a0 10\/1h\r\nUmask \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 002\r\nSyslog \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0yes\r\nSyslogSuccess \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Yes\r\nLogWhy \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Yes\r\n\r\nCanonicalization \u00a0 \u00a0 \u00a0 \u00a0relaxed\/simple\r\n\r\nExternalIgnoreList \u00a0 \u00a0 \u00a0refile:\/etc\/opendkim\/TrustedHosts\r\nInternalHosts \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 refile:\/etc\/opendkim\/TrustedHosts\r\nKeyTable \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0refile:\/etc\/opendkim\/KeyTable\r\nSigningTable \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0refile:\/etc\/opendkim\/SigningTable\r\n\r\nMode \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0sv\r\nPidFile \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \/var\/run\/opendkim\/opendkim.pid\r\nSignatureAlgorithm \u00a0 \u00a0 \u00a0rsa-sha256\r\n\r\nUserID \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0opendkim:opendkim\r\n\r\nSocket \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0inet:12301@localhost<\/pre>\n<\/div>\n<p><em>* \u0432\u0441\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043c\u043e\u0436\u043d\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c, \u043a\u0430\u043a \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c\u00a0<strong>Socket<\/strong>\u00a0\u2014 \u043c\u043e\u0436\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u043e\u0440\u0442, \u0432\u043c\u0435\u0441\u0442\u043e\u00a0<strong>12301<\/strong>.<\/em><\/p>\n<p>\u0422\u0435\u043f\u0435\u0440\u044c \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0438 \u0437\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0444\u0430\u0439\u043b\u044b:<\/p>\n<div class=\"console\" data-markered=\"true\">\n<div class=\"console\" data-markered=\"true\">\n<pre>ee\/etc\/opendkim\/TrustedHosts\r\n127.0.0.1 \r\nlocalhost \r\n*.tst-amo.net.ua<\/pre>\n<\/div>\n<\/div>\n<pre class=\"console\" data-markered=\"true\">ee \/etc\/opendkim\/KeyTable\r\nrelay._domainkey.tst-amo.net.ua tst-amo.net.ua:relay:\/etc\/opendkim\/relay.private<\/pre>\n<div class=\"console\" data-markered=\"true\">\n<pre>ee \/etc\/opendkim\/SigningTable\r\n*@tst-amo.net.ua relay._domainkey.tst-amo.net.ua<\/pre>\n<\/div>\n<p>\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c:<\/p>\n<div class=\"console\" data-markered=\"true\">\n<pre>echo 'milteropendkim_enable=\"YES\"' &gt;&gt; \/etc\/rc.conf\r\necho 'milteropendkim_uid=\"opendkim\"' &gt;&gt; \/etc\/rc.conf\r\n\r\nservice milter-opendkim start<\/pre>\n<\/div>\n<p>\u0412\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \/usr\/local\/etc\/postfix\/main.cf<\/p>\n<pre># DKIM\r\n milter_protocol = 6\r\n milter_default_action = accept\r\n smtpd_milters = inet:localhost:12301\r\n non_smtpd_milters = inet:localhost:12301<\/pre>\n<p>\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c.<\/p>\n<ul>\n<li><a href=\"https:\/\/2keep.net\/configure-dkim-exim-bind\/\">https:\/\/2keep.net\/configure-dkim-exim-bind\/<\/a><\/li>\n<li><a href=\"https:\/\/habrahabr.ru\/post\/173605\/\">https:\/\/habrahabr.ru\/post\/173605\/<\/a><\/li>\n<li><a href=\"https:\/\/www.dmosk.ru\/instruktions.php?object=dkim-postfix\">https:\/\/www.dmosk.ru\/instruktions.php?object=dkim-postfix<\/a><\/li>\n<li><a href=\"https:\/\/www.fryaha.ru\/freebsd-postfix-dkim\/https:\/\/wiki.debian.org\/ru\/opendkim\">https:\/\/www.fryaha.ru\/freebsd-postfix-dkim\/https:\/\/wiki.debian.org\/ru\/opendkim<\/a><\/li>\n<li><a href=\"https:\/\/linode.com\/docs\/email\/postfix\/configure-spf-and-dkim-in-postfix-on-debian-8\/\">https:\/\/linode.com\/docs\/email\/postfix\/configure-spf-and-dkim-in-postfix-on-debian-8\/<\/a><\/li>\n<\/ul>\n<div class=\"pdfprnt-buttons pdfprnt-buttons-post pdfprnt-bottom-right\"><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts2439&print=pdf\" class=\"pdfprnt-button pdfprnt-button-pdf\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/pdf.png\" alt=\"image_pdf\" title=\"View PDF\" \/><\/a><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts2439&print=print\" class=\"pdfprnt-button pdfprnt-button-print\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/print.png\" alt=\"image_print\" title=\"Print Content\" \/><\/a><\/div>","protected":false},"excerpt":{"rendered":"<p>\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439: mkdir \/etc\/opendkim \u0413\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0438\u0445: opendkim-genkey -D \/etc\/opendkim\/ &#8211;domain tst-amo.net.ua &#8211;selector\u00a0relay relay &#8211; \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u043b\u0435\u043a\u0442\u043e\u0440\u0430 (\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043b\u044e\u0431\u044b\u043c \u043d\u0430\u043f\u0440. &#8211; mail) \u0421\u043e\u0437\u0434\u0430\u043b\u043e\u0441\u044c \u0434\u0432\u0430 \u0444\u0430\u0439\u043b\u0430 &#8211; *.private &#8211; \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 (\u0445\u0440\u0430\u043d\u0438\u043c \u0443 \u0441\u0435\u0431\u044f), *.txt &#8211; \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u043b\u044f DNS. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0443 opendkim: pw useradd opendkim -m -s \/usr\/sbin\/nologin\u00a0-w no \u0438 \u043c\u0435\u043d\u044f\u0435\u043c &#8230;<\/p>\n<p><a href=\"https:\/\/tst-amo.net.ua\/blog\/?p=2439\" class=\"more-link\">Continue reading &lsquo;DKIM (BIND, Postfix\/Exim)&rsquo; &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,89,5,8,50,7],"tags":[],"class_list":["post-2439","post","type-post","status-publish","format-standard","hentry","category-bind","category-dkim","category-dns","category-exim","category-freebsd","category-mail"],"_links":{"self":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2439"}],"collection":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2439"}],"version-history":[{"count":9,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2439\/revisions"}],"predecessor-version":[{"id":2649,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2439\/revisions\/2649"}],"wp:attachment":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}