在过去的几个小时里,我一直在为我的Postfix / CentOS 5.3服务器设置DKIM而苦苦挣扎。
它终于发送和签名的电子邮件,但显然谷歌仍然不喜欢它。 我得到的错误是:
dkim =中立(不好的版本)[email protected]
从谷歌“显示原创”的界面。
这是我的DKIM签名头像:
V = 1; A = RSA-SHA1; C =简单/简单; d = mydomain.com.au; S =默认; T = 1267326852; BH = 0wHpkjkf7ZEiP2VZXAse + 46PC1c =; H =date:来自:邮件ID:为:主题; b = IFBaqfXmFjEojWXI / WQk4OzqglNjBWYk3jlFC8sHLLRAcADj6ScX3bzd + No7zos6i KppG9ifwYmvrudgEF + n1VviBnel7vcVT6dg5cxOTu7y31kUApR59dRU5nPR / to0E91dXMaBoYPG8edyiM + soXo7rYNtlzk + 0wd5glgFP1I =
非常感谢我如何解决这个问题的任何build议!
顺便说一句,这正是我如何在CentOS 5.3中安装dkim-milter for postfix,如果有人有兴趣(基于本指南 ):
mkdir dkim-milter cd dkim-milter wget http://www.topdog-software.com/oss/dkim-milter/dkim-milter-2.8.3-1.x86_64.rpm ======S====== Newest version: http://www.topdog-software.com/oss/dkim-milter/ ======E====== rpm -Uvh dkim-milter-2.8.3-1.x86_64.rpm /usr/bin/dkim-genkey -r -d mydomain.com.au ======S====== add contents of default.txt to DNS as TXT _ssp._domainkey TXT dkim=unknown _adsp._domainkey TXT dkim=unknown default._domainkey TXT v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GWETBNiQKBgQC5KT1eN2lqCRQGDX+20I4liM2mktrtjWkV6mW9WX7q46cZAYgNrus53vgfl2z1Y/95mBv6Bx9WOS56OAVBQw62+ksXPT5cRUAUN9GkENPdOoPdpvrU1KdAMW5c3zmGOvEOa4jAlB4/wYTV5RkLq/1XLxXfTKNy58v+CKETLQS/eQIDAQAB ======E====== mv default.private default mkdir /etc/mail/dkim/keys/mydomain.com.au mv default /etc/mail/dkim/keys/mydomain.com.au chmod 600 /etc/mail/dkim/keys/mydomain.com.au/default chown dkim-milt.dkim-milt /etc/mail/dkim/keys/mydomain.com.au/default vim /etc/dkim-filter.conf ======S====== ADSPDiscard yes ADSPNoSuchDomain yes AllowSHA1Only no AlwaysAddARHeader no AutoRestart yes AutoRestartRate 10/1h BaseDirectory /var/run/dkim-milter Canonicalization simple/simple Domain mydomain.com.au #add all your domains here and seperate them with comma ExternalIgnoreList /etc/mail/dkim/trusted-hosts InternalHosts /etc/mail/dkim/trusted-hosts KeyList /etc/mail/dkim/keylist LocalADSP /etc/mail/dkim/local-adsp-rules Mode sv MTA MSA On-Default reject On-BadSignature reject On-DNSError tempfail On-InternalError accept On-NoSignature accept On-Security discard PidFile /var/run/dkim-milter/dkim-milter.pid QueryCache yes RemoveOldSignatures yes Selector default SignatureAlgorithm rsa-sha1 Socket inet:20209@localhost Syslog yes SyslogSuccess yes TemporaryDirectory /var/tmp UMask 022 UserID dkim-milt:dkim-milt X-Header yes ======E====== vim /etc/mail/dkim/keylist ======S====== *@mydomain.com.au:mydomain.com.au:/etc/mail/dkim/keys/mydomain.com.au/default ======E====== vim /etc/postfix/main.cf ======S====== Add: smtpd_milters = inet:localhost:20209 non_smtpd_milters = inet:localhost:20209 milter_protocol = 2 milter_default_action = accept ======E====== vim /etc/mail/dkim/trusted-hosts ======S====== localhost 127.0.0.1 ======E====== /etc/mail/local-host-names ======S====== localhost 127.0.0.1 ======E====== /sbin/chkconfig dkim-milter on /etc/init.d/dkim-milter start /etc/init.d/postfix restart
解决scheme:原来我错过了,我的DNS主机会自动将所有input写成小写(除了自己以外的任何人都不知道的原因)。 这意味着“v = DKIM1”变成了“v = dkim1”,这是一个无效的版本。 这也意味着它由base64哈希变成全部小写,从而打破它。
现在接触我的主机,让他们改变他们的系统。 希望这可以帮助别人!
这个问题至less与你的企鹅盒没有关系,不要pipe它。
从pipe理DNS条目的位置开始,并:
祝你好运
dkim =中立(不好的版本)header.i我有同样的问题,这里的答案http://joyit.ru/home/36-exim-dkim-dkim-neutral-bad-version-header-i.html 。 您需要添加DKIM_CANON