On 2026-01-30 20:02, [email protected] wrote: > Quoth Sagar Acharya <[email protected]>: > > What is the best way to setup DKIM for OpenSMTPD? GMail requires all mail > > domains to have DKIM. > > > > Is it necessary in your view? > > Yup, PTR, SPF, DKIM, and DMARC are the bare minimum needed to not get > blocked by Big Mail™. I use the opensmtpd-filter-dkimsign OpenSMTPD > filter to sign my outgoing mails. The readme[1] it installs should > explain how to set it up. If you get stuck check out these two > guides, they use rspamd for DKIM signing but you can apply the same > general principles with opensmtpd-filter-dkimsign with the readme on > hand: > > https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd/ > > https://dataswamp.org/~solene/2024-07-24-openbsd-email-server-setup.html
rspamd (which is featured in the tutorials linked above) also works quite well. Another tutorial (for OpenSMTPD, Dovecot and rspamd) which describes a setup with virtual users can be found here: https://it-notes.dragas.net/2024/03/08/make-your-own-email-server-freebsd-opensmptd-rspamd-dovecot-part1/ I recommend setting up MTA-STS as well. - Jan
