Re: How could I setup OpenDKIM as milter filter to sign all messages received by MTA via authenticated connection?

From: A. Schulze <sca_at_andreasschulze.de>
Date: Mon, 01 Jun 2015 21:26:35 +0200

Lev Serebryakov:

> I'm sending all my mail via this server, connection to it with SSL
> and SASL authentication.
good starting point.

> Is it possible to instruct OpenDKIM to sign all mail, received by
> postfix via secured AND authenticated connection, no matter from which
> host/domain/IP it was received?
it is.

- define a macro in main.cf

main.cf
     opendkim_milter = inet:localhost:12345

master.cf:
    submission inet n - n - - smtpd
       -o smtpd_milters=${opendkim_milter}
       -o milter_macro_daemon_name=SIGN_ALL_THIS_TRAFFIC
       -o other_tls_and_sasl_stuff

opendkim.conf
     MTA SIGN_ALL_THIS_TRAFFIC
     SigningTable refile:/path/to/signingtable
     KeyTable file:/path/to/keytable

signingtable:
     * keytable_entry

keytable:
     keytable_entry $signing_domain:$selector:/path/to/signing_key

Andreas
Received on Mon Jun 01 2015 - 19:26:54 PST