Hi, all.

We use amavisd-new-2.6.0 to support DKIM feature, according to the quick
guide in release notes file, i did the following steps to enable DKIM,
but i'm little confused, is this setting correct?

* Shell command:
-----------8<---------------------
shell# mkdir /var/amavis/dkim/
shell# su - amavis -c "amavisd genrsa /var/amavis/dkim/example.com.pem"
-----------8<---------------------

* Modify /etc/amavisd.conf to enable DKIM:
-------------8<---------------
$enable_dkim_verification = 1;
$enable_dkim_signing = 1;

dkim_key("a.cn", 'dkim', "/var/amavis/dkim/a.cn.pem");

@dkim_signature_options_bysender_maps = ( {
    #
    # For domain: a.cn.
    #
    '[EMAIL PROTECTED]'    => { a => 'rsa-sha1', ttl =>  7*24*3600 },
    #"[EMAIL PROTECTED]"    => { a => 'rsa-sha1', ttl =>  7*24*3600 },
    ".a.cn"  => { a => 'rsa-sha1', ttl => 10*24*3600 },
    ".a.cn"  => { d => "a.cn" },
    # explicit 'd' forces a third-party signature on foreign (hosted) 
domains

    # catchall defaults
    '.' => { a => 'rsa-sha256', c => 'relaxed/simple', ttl => 30*24*3600 },
    # 'd' defaults to a domain of an author/sender address,
    # 's' defaults to whatever selector is offered by a matching key
} );
----------8<-------------------

* Setup DNS record according the output of 'amavisd showkeys'.
* Verify DNS setting via 'amavisd testkeys', it's 'pass'.

Is it right?

Thanks very much.

-- 
Best Regards.

Zhang Huangbin

- Mail Server Solution for Red Hat(R) Enterprise Linux & CentOS 5.x:
  http://rhms.googlecode.com/


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to