OX DKIM - Versionsgeschichte

Thomas.will: /* check final config */

2021-12-13T11:49:39Z

check final config

2021-12-13T11:48:14Z

TEST

2021-12-13T11:47:58Z

TEST=

2021-12-13T11:47:50Z

Registry

2021-12-13T11:29:35Z

Registry

2021-12-13T11:24:23Z

Edit masters

2021-12-13T11:06:38Z

Erzeugung der Schlüssel

2021-12-13T10:58:05Z

Edit masters

2021-12-13T10:54:36Z

Fix permissions and ownership

2021-12-13T10:53:43Z

set the overriding config

@@ Zeile 80: / Zeile 80: @@
 =Test TXT Record=
 *host -t TXT 202008._domainkey.$DOMAIN
-=TEST==
+=TEST=
 *opendkim-testkey -d $DOMAIN -s 202008 -vvv
   ###   output should look like this:

@@ Zeile 71: / Zeile 71: @@
-######################################################
+=Der TXT Record muss in die Zonendatei=
-########### MANUAL TASK BELOW ########################
+*cat /etc/opendkim/keys/yourdomaincom.txt
-#Now: go to the UCS management Portal: Domain->DNS->yourdomain.com and create a TXT record in zone yourdomain.com:
+ #Now: go to the UCS management Portal: Domain->DNS->yourdomain.com and create a TXT record in zone yourdomain.com:
-#TXT: name=202008._domainkey value=//the_verifiered_key_copied_from_https://dkimcore.org/c/keycheck//
+ #TXT: name=202008._domainkey value=//the_verifiered_key_copied_from_https://dkimcore.org/c/keycheck//
 =Test TXT Record=
 *host -t TXT 202008._domainkey.$DOMAIN

@@ Zeile 84: / Zeile 84: @@
 #Now: go to the UCS management Portal: Domain->DNS->yourdomain.com and create a TXT record in zone yourdomain.com:
 #TXT: name=202008._domainkey value=//the_verifiered_key_copied_from_https://dkimcore.org/c/keycheck//
+=Test TXT Record=
-opendkim-testkey -d yourdomain.com -s 202008 -vvv
+*host -t TXT 202008._domainkey.$DOMAIN
-###   output should look like this:
+=TEST==
-#  opendkim-testkey: using default configfile /etc/opendkim.conf
+*opendkim-testkey -d $DOMAIN -s 202008 -vvv
-#  opendkim-testkey: checking key '202008._domainkey.yourdomain.com'
+ ###   output should look like this:
-#  opendkim-testkey: key not secure
+ #  opendkim-testkey: using default configfile /etc/opendkim.conf
-#  opendkim-testkey: key OK
+ #  opendkim-testkey: checking key '202008._domainkey.yourdomain.com'
-###   do NOT worry about key not secure, this is OK if you do not use DNSSEC
+ #  opendkim-testkey: key not secure
-########### MANUAL TASK ABOVE ########################
+ #  opendkim-testkey: key OK
-######################################################
+ ###   do NOT worry about key not secure, this is OK if you do not use DNSSEC

@@ Zeile 51: / Zeile 51: @@
 *chown -R opendkim:opendkim /etc/opendkim
 *chmod -R go-rwx /etc/opendkim/keys
-=Edit masters=
+=Edit=
-*nano /etc/univention/templates/files/etc/postfix/master.cf.d/30_antivir
+==master===
   ## and add below "127.0.0.1:10025 inet n......."
 -o smtpd_milters=
-## nano /etc/univention/templates/files/etc/postfix/main.cf.d/10_general
+ #opendkim definitions
-## and add below basic path definitions
+ milter_default_action = accept
+ milter_protocol = 6
-#opendkim definitions
+ smtpd_milters = inet:localhost:12345
-milter_default_action = accept
+ non_smtpd_milters = inet:localhost:12345
-milter_protocol = 6
+=Registry=
-smtpd_milters = inet:localhost:12345
+*univention-config-registry commit /etc/postfix/master.cf
-non_smtpd_milters = inet:localhost:12345
+*univention-config-registry commit /etc/postfix/main.cf
+*service postfix restart

@@ Zeile 22: / Zeile 22: @@
 *opendkim-genkey -d $DOMAIN -b 4096 -r -s 202008
 *mv *.private keys/$KEY.private
-*mv *.txt keys/$KEY.text
+*mv *.txt keys/$KEY.txt
 =set the base config=

@@ Zeile 46: / Zeile 46: @@
 HERE
 </pre>
-=set the overriding config=
+=Set the overriding config=
-echo "RUNDIR=/var/run/opendkim" > /etc/default/opendkim
+*echo "RUNDIR=/var/run/opendkim" > /etc/default/opendkim
+=Fix permissions and ownership=
-# fix permissions and ownership
+*chown -R opendkim:opendkim /etc/opendkim
-chown -R opendkim:opendkim /etc/opendkim
+*chmod -R go-rwx /etc/opendkim/keys
 ## nano /etc/univention/templates/files/etc/postfix/master.cf.d/30_antivir