所以我用Postfix设置了OpenDKIM，我仍然可以发送邮件，但是当我这样做时： opendkim-testkey -d example.com -s mail -vvv
我回头：
opendkim-testkey: using default configfile /etc/opendkim.conf opendkim-testkey: checking key 'mail._domainkey.example.com' opendkim-testkey: No key
如果我使用[email protected]它说
DKIM check: permerror和result: permerror (no usable key records)
但在电子邮件中，我可以看到我的公钥在电子邮件标题与s =邮件和d = mydomain.com等…
/ etc / opendkim /被设置为opendkim：opendkim用户和组。
我的opendkim.conf：
# This is a basic configuration that can easily be adapted to suit a standard # installation. For more advanced options, see opendkim.conf(5) and/or # /usr/share/doc/opendkim/examples/opendkim.conf.sample. # Log to syslog Syslog yes # Required to use local socket with MTAs that access the socket as a non- # privileged user (eg Postfix) UMask 002 # Sign for example.com with key in /etc/mail/dkim.key using # selector '2007' (eg 2007._domainkey.example.com) #Domain example.com #KeyFile /etc/mail/dkim.key Selector mail # Commonly-used options; the commented-out versions show the defaults. #Canonicalization simple #Mode sv #SubDomains no #ADSPAction continue # Always oversign From (sign using actual From and a null From to prevent # malicious signatures header fields (From and/or others) between the signer # and the verifier. From is oversigned by default in the Debian pacakge # because it is often the identity key used by reputation systems and thus # somewhat security sensitive. OversignHeaders From # List domains to use for RFC 6541 DKIM Authorized Third-Party Signatures # (ATPS) (experimental) #ATPSDomains example.com ########################### # My Config Setup Below # ########################### AutoRestart Yes AutoRestartRate 10/1h SyslogSuccess Yes LogWhy Yes Canonicalization relaxed/simple ExternalIgnoreList refile:/etc/opendkim/TrustedHosts InternalHosts refile:/etc/opendkim/TrustedHosts KeyTable /etc/opendkim/KeyTable SigningTable refile:/etc/opendkim/SigningTable Mode sv PidFile /var/run/opendkim/opendkim.pid SignatureAlgorithm rsa-sha256 UserID opendkim:opendkim Socket inet:12301@localhost
我的KeyTable文件：
example.com example.com:mail:/etc/opendkim/keys/example.com/mail.private
我的SigningTable文件：
*@example.com example.com
任何帮助，这是非常感谢。
现在sorting。
我把公钥放在主要部分的DNSlogging中，当我把它放在子域部分，以mail._domainkey.example.com作为名称/子域。