Re: [dkim-milter-discuss] dkim-milter in postfix with multiple domains.

[Eagle L. C. S. <ser...@ea...>]

I installed it probably a month ago playing around but gave up for a little 
while as I had more important things at the time, so it's probably not the 
latest.  Can't remember if I installed it using yum or with a file, but it's 
2.2.1.  That makes more sense.  I couldn't find any clear instructions and 
couldn't find anything that just said "Domain" in that file that people 
referenced.  There is more references for sendmail then there is for 
postfix, but I'm not sure what the real differences are othat than the 
configuration in each MTA.  I would definitely rather use different keys 
just because the domains aren't all mine, and it seems more secure that way. 
Thanks for your help.

Jeff


----- Original Message ----- 
From: "SM" <sm...@re...>
To: "dkim-milter general discussion" 
<dki...@li...>
Sent: Sunday, April 05, 2009 1:26 AM
Subject: Re: [dkim-milter-discuss] dkim-milter in postfix with multiple 
domains.


> At 21:56 04-04-2009, Eagle Link Customer Service wrote:
>>This is the part I'm a bit confused about.  So far all I've done is 
>>generate
>>the keys and edit the DNS records.  I'm running CentOS 4.  Instructions 
>>I've
>>read tell me to edit /etc/sysconfig/dkim-milter (the config file) to 
>>change
>>"Domains" to list all the domains.  The closest thing I could find was
>>"SIGNING_DOMAIN", so I did that.  Then everything says that you must use 
>>the
>>same key on all domains, but I'm not sure why since
>>KEYFILE="/etc/dkim-milter/${SIGNING_DOMAIN}_${SELECTOR_NAME}.key.pem" 
>>should
>>make it chose the right file based on the domain.  I haven't even begun to
>>configure postfix yet or any startup file for dkim-milter because I wanted
>
> The /etc/sysconfig/dkim-milter file is not the same as the
> dkim-filter configuration file.  I have not read the script to find
> out how it actually works.
>
> The "SIGNING_DOMAIN" should be the domain for which you want to DKIM
> sign messages.  The script was most likely written to handle one
> domain only.  The easiest way to get around that is to modify the
> startup parameters so that the script points to a dkim-filter
> configuration file (-x).  You can then specify the domain names in there.
>
> Which version of dkim-milter did you install?
>
>>to get everything configured correctly first.  So can anyone tell me why I
>>need to use the same keys and how the config should look for that?
>
> You don't have to use the same keys unless the software you run has
> that restriction.  dkim-filter supports multiple keys.  You can use a
> different key for each domain or you can use the same key for all domains.
>
> Regards,
> -sm
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> dkim-milter-discuss mailing list
> dki...@li...
> https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
>