5
edits
Difference between revisions of "Mailing list"
Add DKIM setup
(→Remove spam confirmation requests: add mailman version) |
(Add DKIM setup) |
||
| Line 30: | Line 30: | ||
Abhijith PA, Prinz Piuz, Balasankar C | Abhijith PA, Prinz Piuz, Balasankar C | ||
= Admin Documentation = | |||
== Generate DKIM for new domains == | |||
We use 'opendkim'[http://opendkim.org/] to implement DKIM. | |||
To generate DKIM keys, use <code>opendkim-genkey -b 4096 -h rsa-sha256 -r -s <selector_name> -d <domain_name_of_this_list> -v`</code> | |||
<br /> | |||
We don't have any format on selector naming. Pick something related to this list(for eg: the selector for the domain lists.fsci.org.in is <code>lists</code> what we used). | |||
After generating the DKIM keys, we will get two files. | |||
* <selector_name>.private - which contains the private signing key. | |||
* <selector_name>.txt - which contains the DKIM TXT DNS record for that domain. | |||
<be /> | |||
Now, create a folder under /etc/opendkim/keys/<domain_name_for_this_list>/ and move the above file to that location. | |||
<br /> | |||
Create an entry for the newly created domain in /etc/opendkim/KeyTable as well as /etc/opendkim/SigningTable | |||
<be /> | |||
On /etc/opendkim/KeyTable | |||
<selector_name._domainkey.<domain_name_of_this_list> <domain_name_of_this_list>:<selector_name>:/etc/opendkim/keys/<domain_name_of_this_list>/<selector_name>.private | |||
eg: lists._domainkey.lists.fsci.org.in lists.fsci.org.in:lists:/etc/opendkim/lists.private | |||
On /etc/opendkim/SigningTable | |||
<domain_name_of_this_list> <selector_name>._domainkey.<domain_name_of_this_list> | |||
eg: lists.fsci.org.in lists._domainkey.lists.fsci.org.in | |||
More on DKIM keys, formating etc: [[https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail DomainKeys Identified Mail]], | |||
Setup DKIM with OpenDKIM on Debian: [[https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-dkim-with-postfix-on-debian-wheezy How To Install and Configure DKIM with Postfix on Debian]] | |||
== Verify DKIM and other settings for new domains == | == Verify DKIM and other settings for new domains == | ||