openQmail

A modern mail transfer agent suite around eQmail

User Tools

Site Tools


Modules


qdkim

Version: qkim-devel
Released: 26th May 2017
Download: openqmail-latest         
Checksum: sha256sum

qdkim will be discussed on the openqmail mailing list.

qdkim is a module to verify DKIM signatures of incoming messages as well signing outgoing messages. It is available as part of openqmail. It is designed to incorporate with eQmail, but should work with other *qmail derivatives in general too.

Install

Download the sources and extract it. Change into the source folder  qdkim  and check the file  conf-home . Then run

$ ./configure
$ make
$ make install

Configuration

All pathes below are relative to the eQmail home directory. The main config file is  etc/qdkim.conf . After installation it consists working defaults. DKIM processing is deactivated (OFF) by default.

Sign messages

Before messages can be signed a domain key is required. To create one for  example.com  run

$ mkdkimkey example.com

An existing key will not overwritten. The key have to be published in DNS. To check out the TXT record for bind use the  -p  option:

$ mkdkimkey -p example.com

Publish the key in DNS. Keys will be stored in  etc/dkimkeys/<domain>/  with dropped access rights. Now put  qmail-sdkim  include the full path on the first line of  etc/beforemote  *, e.g.

/var/qmail/bin/qmail-sdkim

Last step is to activate signing in the config file by setting

DOSIGN=1

Now you can test it:

$ echo "DKIM test" | sendmail -f user@example.com <your@email.address>

Verify DKIM signatures

The recommended way to plugin  qmail-vdkim  is to set

QMAILQUEUE=/var/qmail/bin/qmail-vdkim

Afterwards a restart is required. To activate verification set in  etc/qdkim.conf 

DOVRFY=1

Alternatives

The mentioned file  etc/beforemote  is part of  qmail-bfrmt , a feature of eQmail which is usually not available on derivatives. Workaround:

After qdkim was installed, stop *qmail and do

$ mv qmail-remote qmail-remote.bin
$ ln -s qmail-sdkim qmail-remote

In qdkim.conf set QMAILREMOTE to the renamed  qmail-remote.bin  with the correct absolute path, like

QMAILREMOTE="/usr/local/qmail/bin/qmail-remote.bin"

Refer to Configuration above and start *qmail.

There is a patch available also. Use at your own risk.

Last modified: 2018/10/29 14:12

Page Tools