Question

我正在使用mail-server.net检查我的后缀设置。我有SPF，DKIM和DMARC设置和工作。但是，mail-server.net声称我在一条消息中有2个DKIM签名。这怎么可能？这是我的DNS记录的样子：

名称值TTL选项 v = spf1 mx -all默认编辑|删除

201705._domainkey v = DKIM1; H = SHA256; K = RSA; S =电子邮件; P = MIIBIjANBgk ...

_adsp._domainkey dkim = all

_dmarc v = DMARC1; p =隔离; sp =隔离; adkim = r; aspf = r; fo = 1; rf = afrf; rua = mailto：alescher@adventurecatsnw.com

如您所见，我在txt记录中只包含一个DKIM签名密钥。我正在使用opendkim作为DKIM签名者。我在key.table记录中只有一个密钥，在signed.table记录中只有一个条目。有没有人对这个问题有任何想法？

Answer 1

我有同样的问题（尚未解决），但我认为这与SpamAssassin有关。

看起来在SpamAssassin过滤器之前和之后添加了DKIM签名。

my mailheader
Return-Path: <info@mydomain>
X-Original-To: info@mydomain
Delivered-To: info@mydomain
Received: by mail.mydomain (Postfix, from userid 1001)
    id 2D776B7CA; Wed,  7 Jun 2017 23:15:02 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.mydomain 2D776B7CA
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mydomain;
    etc.
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
    hostname.mydomain
X-Spam-Level: 
X-Spam-Status: No, score=-0.9 required=3.0 tests=ALL_TRUSTED,DKIM_SIGNED,
    HTML_MESSAGE,T_DKIM_INVALID,URIBL_BLOCKED autolearn=no autolearn_force=no
    version=3.4.0
Received: from [mylocalip] (myprovider [myip])
    by mail.mydomain (Postfix) with ESMTPSA id BB..
    for <info@mydomain>; Wed,  7 Jun 2017 23:15:01 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.mydomain BB..
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mydomain;
    etc.

cat / var / log / maillog | grep“DKIM-Signature field added”

Jun  8 00:02:34 host opendkim[762]: BCD70B75A: DKIM-Signature field added (s=default, d=mydomain)
Jun  8 00:02:34 host opendkim[762]: F3341B7CA: DKIM-Signature field added (s=default, d=mydomain)

检查这个答案： https://serverfault.com/questions/475416/is-there-a-reason-why-dkim-signs-every-mail-twice

Answer 2

我的错误发生在/etc/postfix/master.cf中，现在已修复。

这是我的第一个postfix安装，我有：

smtp      inet  n       -       n       -       -       smtpd -o content_filter=spamfilter
smtps     inet  n       -       n       -       -       smtpd -o content_filter=spamfilter
submission inet n       -       n       -       -       smtpd -o content_filter=spamfilter

我将其更改为：

smtp      inet  n       -       n       -       -       smtpd 
smtps     inet  n       -       n       -       -       smtpd
submission inet n       -       n       -       -       smtpd -o content_filter=spamfilter

祝你好运！

消息中有多个DKIM签名？

2 个答案: