In this video we improve our sent email score to 8.9/10 by adding a DKIM to our Raspberry Pi and DNS server. This is the third phase of work towards making our emails end up in our recipients inbox and not their spam box.
The settings snippets I promise in the video is here. Please note that YouTube now has Markdown, so any text below starting with a # is considered a header. This clearly breaks the example settings, much of which contain #’s.
So, please note every comment # has a \ in front of it that will need *removing*, so make sure you copy and past this into a text editor, remove the \’s at the start and then paste in.
\# This is a basic configuration that can easily be adapted to suit a standard
\# installation. For more advanced options, see (5) and/or
\# /usr/share/doc/opendkim/examples/.
\# Log to syslog
Syslog yes
\# Required to use local socket with MTAs that access the socket as a non-
\# privileged user (e.g. Postfix)
UMask 002
\# Sign for with key in /etc/dkimkeys/ using
\# selector ’2007’ (e.g. )
\#Domain
\#KeyFile /etc/dkimkeys/
\#Selector 2007
\# Commonly-used options; the commented-out versions show the defaults.
Canonicalization simple
Mode sv
SubDomains no
AutoRestart yes
AutoRestartRate 10/1M
Background yes
DNSTimeout 5
SignatureAlgorithm rsa-sha256
\# Socket smtp://localhost
\#
\# ## Socket socketspec
\# ##
\# ## Names the socket where this filter should listen for milter connections
\# ## from the MTA. Required. Should be in one of these forms:
\# ##
\# ## inet:port@address to listen on a specific interface
\# ## inet:port to listen on all interfaces
\# ## local:/path/to/socket to listen on a UNIX domain socket
\#
\#Socket inet:8892@localhost
Socket local:/var/spool/postfix/opendkim/
\## PidFile filename
\### default (none)
\###
\### Name of the file where the filter should write its pid before beginning
\### normal operations.
\#
PidFile /var/run/opendkim/
\# Always oversign From (sign using actual From and a null From to prevent
\# malicious signatures header fields (From and/or others) between the signer
\# and the verifier. From is oversigned by default in the Debian pacakge
\# because it is often the identity key used by reputation systems and thus
\# somewhat security sensitive.
OversignHeaders From
\## ResolverConfiguration filename
\## default (none)
\##
\## Specifies a configuration file to be passed to the Unbound library that
\## performs DNS queries applying the DNSSEC protocol. See the Unbound
\## documentation at for the expected content of this file.
\## The results of using this and the TrustAnchorFile setting at the same
\## time are undefined.
\## In Debian, /etc/unbound/ is shipped as part of the Suggested
\## unbound package
\# ResolverConfiguration /etc/unbound/
\## TrustAnchorFile filename
\## default (none)
\##
\## Specifies a file from which trust anchor data should be read when doing
\## DNS queries and applying the DNSSEC protocol. See the Unbound documentation
\## at for the expected format of this file.
TrustAnchorFile /usr/share/dns/
\## Userid userid
\### default (none)
\###
\### Change to user “userid“ before starting normal operation? May include
\### a group ID as well, separated from the userid by a colon.
\#
UserID opendkim
\# Map domains in From addresses to keys used to sign messages
KeyTable refile:/etc/opendkim/
SigningTable refile:/etc/opendkim/
\# Hosts to ignore when verifying signatures
ExternalIgnoreList /etc/opendkim/
\# A set of internal hosts whose mail should be signed
InternalHosts /etc/opendkim/
And here...
\# Milter configuration
milter_default_action = accept
milter_protocol = 6
smtpd_milters = local:/opendkim/
non_smtpd_milters = $smtpd_milters
1 view
2209
813
17 minutes ago 00:19:14 1
Реестр повесток с 1 ноября | Жизнь дороже заграна — не ходите в военкомат @Max_Katz
2 hours ago 00:51:14 1
Как фотография изменила ход истории / Точка отсчета / @MINAEVLIVE
2 hours ago 00:10:55 1
Ад необходим и реален (Тим Конвей)
2 hours ago 00:08:27 1
How to Fix Google Ads Disapproved for Compromised Site 2024 🚫🔄 (Case Study) 📈🔓
2 hours ago 00:49:44 1
Джонатан Эдвардс | Грешники в руках разгневанного Бога (аудиокнига)
2 hours ago 00:07:47 1
Тим Конвей | Многие люди идут в ад
2 hours ago 00:06:02 1
Гордые люди будут идти в ад | Тим Конвей
2 hours ago 00:04:02 1
Вечный ад, Небесный Иерусалим и Бог все во всем - как это все сочетается? (Джон МакАртур)
2 hours ago 00:57:35 1
Истина об аде (Джон МакАртур)
2 hours ago 00:05:25 1
Не смягчайте реальность ада (Чарльз Лейтер)
2 hours ago 01:05:41 1
Доктрина об Аде (Тим Конвей)
2 hours ago 01:04:03 1
Лев Клыков – О том, что нас ждет в новом мире и каким будет 2023-й
2 hours ago 00:30:18 1
Русь предызначальная: 753 - 882 гг. Музыка к фильму. Pre-Primordial Rus’: 753 - 882 Movie Soundtrack
4 hours ago 00:35:50 1
Микродозинг работает или нет?
5 hours ago 00:59:47 1
Kygo (The Album) - Live From The Troll’s Tongue
5 hours ago 00:40:56 1
Массовый выход из РПЦ МП необходим. Державный Патриарх Зосима.
5 hours ago 00:32:47 1
15. Adding DKIM to your email server
6 hours ago 00:01:30 1
очень нужна огласка! собаки умирают!
6 hours ago 00:20:51 1
Сделай эти упражнения и кишечник будет здоров! От запоров, вздутия и выпирающего живота
6 hours ago 01:12:37 1
DmC Devil May Cry Definitive Edition — Все коллекционные предметы (Пропащие души, Ключи и Двери)
6 hours ago 00:35:12 1
Израиль бьет по Хезболле: начинается Третья ливанская война? | Новости, Ближний Восток
6 hours ago 00:17:08 1
15 min Morning Yoga Flow - All Levels, No Props
6 hours ago 00:32:27 1
🔥 УЮТНЫЙ интерьер для МАМЫ! ТРЁШКА с видом на Троице-Сергиеву лавру! Ремонт от дочки. Рум тур
7 hours ago 01:20:16 1
БЛОКАДА ЛЕНИНГРАДА / Вторая мировая война / Уроки истории @MINAEVLIVE