-4

I am using Centos-5 and have configured postfix mail server. How to i configure SPF and DKIM in Postfix.

John P
  • 154
  • 6
  • Your problem could be everything. You describe it like "How can I change the license plate of my car because I always get controlled by the police?" Probably this is due to speeding, broken lights, bumps and dents, driving on red light or whatever but not because you have "azz kickr" on the plate. – mailq Oct 17 '11 at 00:13

2 Answers2

2

SPF and DKIM are two separate things. SPF you should read up on using www.openspf.org

As for DKIM, Steve Jenkins posted a great guide on his blog a year ago: http://stevejenkins.com/blog/2010/09/how-to-get-dkim-domainkeys-identified-mail-working-on-centos-5-5-and-postfix-using-opendkim/

Read the guide thoroughly to understand how it works and do not simply copy/paste the config and then ask "why doesn't it work?"

There is something to understanding DKIM and you must be patient and read a lot to make it work.

Frands Hansen
  • 4,657
  • 1
  • 17
  • 29
  • Thank you for reply me .actually i have worked on it as you told me but it really does not work properly. Is there any other place to read about DKIM. if yes then please tell me. – John P Oct 16 '11 at 10:00
0

Your problem may well be your DNS configuration. Start with a static DNS address and get reverse DNS working. DKIM and SPF both have DNS components which need to be configured correctly. I don't believe either DKIM or SPF will solve your problem, but do get them working.

I have posted on Detecting Email Server Forgery. This is written from the perspective of the recipient. However, it specifies the DNS entries that your need. If you are having problems sending to Gmail and Yahoo, it is likely one of the rules in this document that is causing problem.

My post on Securing your Email Reputation with SPF outlines the various SPF records you may want on various servers. You should protect your domain, web domain, as well as your mail server domain.

My post on Implementing DKIM with Exim also covers key management and the DNS entries for bind. You will need these if you want your DKIM signatures to be valid.

BillThor
  • 27,737
  • 3
  • 37
  • 69