Настройка SPF, DKIM, DMARC

Настройка SPF

Настройка DKIM

$ sudo yum install opendkim

$ sudo apt install opendkim opendkim-tools

$ sudo systemctl start opendkim

$ sudo systemctl enable opendkim

$ cd /etc/opendkim/keys/
$ mkdir -p my-domain.host

$ sudo opendkim-genkey --directory /etc/opendkim/keys/my-domain.host/ --domain my-domain.host --selector dkim

$ sudo chown -R opendkim:opendkim /etc/opendkim/keys/my-domain.host

$ cd /etc
$ sudo nano opendkim.conf

AutoRestart             Yes
AutoRestartRate         10/1h
Umask                   002
Syslog                  yes
SyslogSuccess           Yes
LogWhy                  Yes
Canonicalization        relaxed/simple
ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrustedHosts
KeyTable                refile:/etc/opendkim/KeyTable
SigningTable            refile:/etc/opendkim/SigningTable
Mode                    sv
PidFile                 /var/run/opendkim/opendkim.pid
SignatureAlgorithm      rsa-sha256
UserID                  opendkim:opendkim
Socket                  inet:8891@localhost

$ cd /etc/opendkim/
$ sudo nano TrustedHosts

127.0.0.1
localhost
*.my-domain.host

$ cd /etc/opendkim/
$ sudo nano KeyTable

dkim._domainkey.my-domain.host my-domain.host:dkim:/etc/opendkim/keys/my-domain.host/dkim.private

$ cd /etc/opendkim/
$ sudo nano SigningTable

*@my-domain.host dkim._domainkey.my-domain.host

$ cd /etc/default/
$ sudo nano opendkim

SOCKET="inet:8891@localhost"

postconf -e 'milter_default_action=accept'
postconf -e 'milter_protocol=2'
postconf -e 'smtpd_milters=inet:127.0.0.1:8891'
postconf -e 'non_smtpd_milters=inet:127.0.0.1:8891'

$ sudo systemctl restart opendkim

$ sudo systemctl restart postfix

$ cd /etc/opendkim/keys/my-domain.host/
$ sudo cat dkim.txt

Настройка DMARC

v=DMARC1; p=reject; pct=30; rua=mailto:for-reports@my-domain.host

Проверка настроек